From: Amon Ott <ao@rsbac.org>
Subject: Re: rsbac dir
Date: Thu, 4 Oct 2001 09:41:35 +0200
Next Article (by Date): Re: Port to BSD? Amon Ott
Previous Article (by Date): Port to BSD? "Ties Voskamp"
Top of Thread: rsbac dir Arkady A Drovosekov
Articles sorted by: [Date]
[Author]
[Subject]
On Wednesday 03 October 2001 07:51, Stanislav Ievlev wrote: > Amon Ott wrote: > >On Monday 01 October 2001 17:28, you wrote: > >>Hello Arkady! > >> > >>Arkady A Drovosekov wrote: > >>>Hi, > >>>is it possible to hide 'rsbac' directories on filesystems? Can't > >>> remember is there in a docs or no... > >> > >>You can create a simple patch for fill_dir() function (I can send an > >>example to you if you want). > >>But... Why we need it for? > >>It's really bad for benchmark and nothing for security. > > > >One thing you can do is prohibit GET_STATUS_DATA on these dirs - e.g. ls > > -l will not show them anymore. > > But we will have a lot of warnings in logs ;) Turn them off with individual logging (rsbac_fd_menu /rsbac, return on log_array_low/high, GET_STATUS_DATA, never log). Amon. -- http://www.rsbac.org - To unsubscribe from the rsbac list, send a mail to majordomo@rsbac.org with unsubscribe rsbac as single line in the body.
Next Article (by Date): Re: Port to BSD? Amon Ott
Previous Article (by Date): Port to BSD? "Ties Voskamp"
Top of Thread: rsbac dir Arkady A Drovosekov
Articles sorted by: [Date]
[Author]
[Subject]