Re: rsbac dir


From: Amon Ott <ao@rsbac.org>
Subject: Re: rsbac dir
Date: Thu, 4 Oct 2001 09:41:35 +0200

Next Article (by Date): Re: Port to BSD? Amon Ott
Previous Article (by Date): Port to BSD? "Ties Voskamp"
Top of Thread: rsbac dir Arkady A Drovosekov
Articles sorted by: [Date] [Author] [Subject]


On Wednesday 03 October 2001 07:51, Stanislav Ievlev wrote:
> Amon Ott wrote:
> >On Monday 01 October 2001 17:28, you wrote:
> >>Hello Arkady!
> >>
> >>Arkady A Drovosekov wrote:
> >>>Hi,
> >>>is it possible to hide 'rsbac' directories on filesystems? Can't
> >>> remember is there in a docs or no...
> >>
> >>You can create a simple patch for fill_dir() function  (I can send an
> >>example to you if you want).
> >>But... Why we need it for?
> >>It's  really bad for benchmark and nothing for security.
> >
> >One thing you can do is prohibit GET_STATUS_DATA on these dirs - e.g. ls
> > -l will not show them anymore.
>
> But we will have a lot of warnings in logs ;)

Turn them off with individual logging (rsbac_fd_menu /rsbac, return on 
log_array_low/high, GET_STATUS_DATA, never log).

Amon.
--
http://www.rsbac.org
-
To unsubscribe from the rsbac list, send a mail to
majordomo@rsbac.org with
unsubscribe rsbac
as single line in the body.

Next Article (by Date): Re: Port to BSD? Amon Ott
Previous Article (by Date): Port to BSD? "Ties Voskamp"
Top of Thread: rsbac dir Arkady A Drovosekov
Articles sorted by: [Date] [Author] [Subject]


Go to Compuniverse LWGate Home Page.