rsbac-v1.1.1-pre2 uploaded


From: Amon Ott <ao@rsbac.org>
Subject: rsbac-v1.1.1-pre2 uploaded
Date: Fri, 19 Jan 2001 15:20:03 +0100

Next Article (by Author): New request MMAPEXEC? Amon Ott
Previous Article (by Author): Benchmark? Amon Ott
Articles sorted by: [Date] [Author] [Subject]


Hello again!

Pre2 of the upcoming 1.1.1 version has been uploaded to the /pre dir.


- Support for 2.2.18 and 2.4.0 with new Makefiles. Sorry, support for 2.3.0 to
2.4.0-prerelease has been dropped via these Makefiles. You can still get them
working by hand, though.

- The whole locking scheme on list loading at boot and mount time has been
reworked, because some people reported boot lockups.

- *Optional* interception of sys_read and sys_write. This places a significant
extra load on the system (benchmarks?), but lets access control react
immediately on changed settings.
Attention: If you upgrade and turn this on, you might have to add READ and WRITE
rights to FILE, FIFO, DEV and IPC targets (RC and ACL) before booting the new
kernel. The default settings should as usual work.

- Init process ACI now partly depends on root's ACI: mac_security_level,
mac_categories, etc. and rc_role are copied from there.

Please test this version, if you can. Specially those who had lockups and
those with SMP systems please test and report results. If all works fine, this
is my 1.1.1 release candidate...

Amon.
-
To unsubscribe from the rsbac list, send a mail to
majordomo@rsbac.org with
unsubscribe rsbac
as single line in the body.

Next Article (by Author): New request MMAPEXEC? Amon Ott
Previous Article (by Author): Benchmark? Amon Ott
Articles sorted by: [Date] [Author] [Subject]


Go to Compuniverse LWGate Home Page.