Re: rsbac-v1.2.0-pre1 uploaded

From: Amon Ott <ao@rsbac.org>
Subject: Re: rsbac-v1.2.0-pre1 uploaded
Date: Tue, 4 Sep 2001 16:28:05 +0200

Next Article (by Subject): Re: rsbac-v1.2.0-pre1 uploaded Amon Ott
Previous Article (by Subject): Re: rsbac-v1.2.0-pre1 uploaded Stanislav Ievlev
Top of Thread: rsbac-v1.2.0-pre1 uploaded Amon Ott
Next in Thread: Re: rsbac-v1.2.0-pre1 uploaded Amon Ott
Articles sorted by: [Date] [Author] [Subject]

On Die, 04 Sep 2001 Stanislav Ievlev wrote:
> Amon Ott wrote:
> 
> >Hi there!
> >
> >To give you an idea of what I am doing, I made a pre1.
> >
> >- Most lists moved to generic lists
> >- Attributes split between modules, thus less memory overhead with few modules
> >- New Linux capabilities (CAP) module: set minimum and maximum capability sets
> >for individual users and programs, e.g. to start daemons as normal user
> >- 1.2.0 kernels can coexist with 1.1.x kernels (new list filenames), but admin
> >tools are incompatible.
> >- Altogether code and kernel size have been reduced
> >
> >Since huge amounts of code have been changed for the new attribute handling,
> >there are probably still some bugs. However, I have not seen them yet... ;)
> >
> I've just seen it. It's very very interesting!
> RSBAC+CAP wins LIDS!

Good. :)
 
> Some questions:
> 
> 1) What is a GEN module?

General attributes for all modules. Will be documented later... :)

> 2) You are splitting attributes into different lists, but rsbac_menu 
> want to see all of them (RSBAC_EINVALUDMODULE). What do you think about 
> following idea:
>         display only attributes I currently have. It's a very eazy to 
> make  it and we will need it very much ;)

In fact it is not that easy because of bash problems, but it will somehow
happen. Try export RSBAC_REDUCED=yes for now...

Amon.
-
To unsubscribe from the rsbac list, send a mail to
majordomo@rsbac.org with
unsubscribe rsbac
as single line in the body.

Go to Compuniverse LWGate Home Page.