1.0.9c-pre4


From: Amon Ott <ao@rsbac.org>
Subject: 1.0.9c-pre4
Date: Thu, 9 Nov 2000 18:01:50 +0100

Next Article (by Date): Re: 1.0.9c-pre4 / 1.1.0-pre1 Amon Ott
Previous Article (by Date): bind() Jörgen Sigvardsson
Next in Thread: Re: 1.0.9c-pre4 Jörgen Sigvardsson
Articles sorted by: [Date] [Author] [Subject]


Hello again!

1.0.9c-pre4 has just been uploaded to the /pre dir.

- New patch-2.2.17, patch-2.4.0-test9, patch-2.4.0-test10 (old ones still work,
but lack what comes next)

- New EXECUTE requests in sys_mmap and sys_mprotect. Jörgen correctly pointed
out that mmap can be used to bypass EXECUTE via READ_OPEN and provided a demo
patch.
Note: We now have EXECUTE requests for target NONE (SCD other in RC and
ACL), if no file can be determined for the code to be turned executable. You
might have to adjust your configuration. The default settings are of course
working.

- MAC light - Stanislavs optional changes to make life easier with MAC

- Additional interception in sys_bind for UDP (2.4 series only)

- Admin tools have not changed, please use pre3 ones

- SMP seems to be working fine with 2.2.17 and 2.4.0-test10 kernels on my
non-SMP vmware system. Could someone please verify test10 on a real SMP system?

Stanislav and Jörgen, could you please verify the MAC and mmap changes?

This version is my release candidate, so please all beat on it and report. I
need your reports!

Amon.
-
To unsubscribe from the rsbac list, send a mail to
majordomo@rsbac.org with
unsubscribe rsbac
as single line in the body.

Next Article (by Date): Re: 1.0.9c-pre4 / 1.1.0-pre1 Amon Ott
Previous Article (by Date): bind() Jörgen Sigvardsson
Next in Thread: Re: 1.0.9c-pre4 Jörgen Sigvardsson
Articles sorted by: [Date] [Author] [Subject]


Go to Compuniverse LWGate Home Page.