gmane.linux.rsbac

Re: daz

Jens Kasten — 2013-06-19T17:20:00

I did not realize that I turned on the daz debugging :)
So you can ignore it.

Am 2013-06-19 18:01, schrieb Jens Kasten:

daz

Jens Kasten — 2013-06-19T16:01:53

Hi list,

I get tons of this entries in the logfile.

Wed Jun 19 17:59:30 2013 :70031845741|daz_reset_scanned(): pid 15593 
(rklogd), resetting scanned status!

Jens

Re: kernel build

Amon Ott — 2013-06-18T08:33:28

Am 18.06.2013 07:35, schrieb Jens Kasten:

I cannot reproduce them here - tried compile with 32 and 64 Bit. Please
send your .config for tests and recheck, whether your code base is correct.

Amon.

kernel build

Jens Kasten — 2013-06-18T05:35:56

Hi list,

i try the latest kernel linux-3.9.y (.6)
I got the follow compile errors.

rsbac/adf/adf_main.c: In function ‘rsbac_fake_uid’:
rsbac/adf/adf_main.c:3204:8: error: wrong type argument to unary 
exclamation mark
rsbac/adf/adf_main.c:3207:7: error: incompatible types when returning 
type ‘kuid_t’ but ‘rsbac_uid_t’ was expected
rsbac/adf/adf_main.c:3213:9: error: incompatible types when returning 
type ‘kuid_t’ but ‘rsbac_uid_t’ was expected
rsbac/adf/adf_main.c:3225:9: error: incompatible types when returning 
type ‘kuid_t’ but ‘rsbac_uid_t’ was expected
rsbac/adf/adf_main.c:3233:11: error: incompatible types when returning 
type ‘kuid_t’ but ‘rsbac_uid_t’ was expected
rsbac/adf/adf_main.c: In function ‘rsbac_fake_euid’:
rsbac/adf/adf_main.c:3243:8: error: wrong type argument to unary 
exclamation mark
rsbac/adf/adf_main.c:3246:7: error: incompatible types when returning 
type ‘kuid_t’ but ‘rsbac_uid_t’ was expected
rsbac/adf/adf_main.c:3253:9: error: in

Re: wrong load

Jens Kasten — 2013-06-07T16:02:30

Oh its was my fail.
A process was hanging on nfs. 


Am Dienstag, den 04.06.2013, 20:55 +0200 schrieb Jens Kasten:


_______________________________________________
rsbac mailing list
rsbac< at >rsbac.org
http://www.rsbac.org/mailman/listinfo/rsbac

wrong load

Jens Kasten — 2013-06-04T18:55:49

Hi list,

I guess that the value what is showing by top is wrong.
See attachment.

Kernel:
Linux jaschtschik 3.2.45-rsbac-3+ #4 SMP Mon Jun 3 11:26:41 CEST 2013
x86_64 AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ AuthenticAMD
GNU/Linux

Grüße
Jens
_______________________________________________
rsbac mailing list
rsbac< at >rsbac.org
http://www.rsbac.org/mailman/listinfo/rsbac

nfs

igraltist — 2013-06-03T09:59:33

No, is the same.
I also cannot kill this process with ctrl + c. Have on other shell kill
this process.

Re: nfs

Amon Ott — 2013-06-03T07:26:17

Am 03.06.2013 09:21, schrieb Jens Kasten:

Please enable the various lockup detection options in the Kernel Hacking
section of kernel config, they will most likely show you a trace that
you can post here.

Amon.

nfs

Jens Kasten — 2013-06-03T07:21:53

Hi list,

I try on kernel 3.2.45 to get nfs working but its fail.
So far all is working but when I on client side on the mounted area a
strace touch /my/nfs/testfile its hangs on open the file. 
I get no errors in any logfile.

Grüße
Jens  



_______________________________________________
rsbac mailing list
rsbac< at >rsbac.org
http://www.rsbac.org/mailman/listinfo/rsbac

Re: (no subject)

somayeh razeghi — 2013-05-23T03:25:23

iLearn H0w t0 Make health 0nl1ne Fast http://classicthairidgeback.com/www.foxnews.com.addmoneynews.homebuisness3.php

linux-3.9.y

Jens Kasten — 2013-05-22T21:42:30

Hi,

latest pull on linux-3.9.y(3.9.3) produce this error.
 
rsbac/data_structures/gen_lists.c: In Funktion »rsbac_list_ta_commit«:
rsbac/data_structures/gen_lists.c:8166:29: Fehler: Ungültige Operanden
für binäres != (haben »rsbac_uid_t« und »kuid_t«)
rsbac/data_structures/gen_lists.c: In Funktion »rsbac_list_ta_forget«:
rsbac/data_structures/gen_lists.c:8276:29: Fehler: Ungültige Operanden
für binäres != (haben »rsbac_uid_t« und »kuid_t«)
rsbac/data_structures/gen_lists.c: In Funktion »rsbac_list_ta_refresh«:
rsbac/data_structures/gen_lists.c:8381:29: Fehler: Ungültige Operanden
für binäres != (haben »rsbac_uid_t« und »kuid_t«)
rsbac/adf/adf_main.c: In Funktion »rsbac_fake_uid«:
rsbac/adf/adf_main.c:3204:8: Fehler: Argument falschen Typs für unäres
Ausrufungszeichen
rsbac/adf/adf_main.c:3207:7: Fehler: unverträgliche Typen bei Rückgabe
von Typ »kuid_t«, aber »rsbac_uid_t« wurde erwartet
rsbac/adf/adf_main.c:3213:9: Fehler: unverträgliche Typen bei Rückgabe
von Typ »k

Re: A problem when pulling linux-3.8.y

Jens Kasten — 2013-05-22T11:51:50

Am Mittwoch, den 22.05.2013, 09:25 +0200 schrieb Amon Ott:

Just for info. I have enabled the secure delete and don't get this
error. I use the ext4 filesystem.

Re: A problem when pulling linux-3.8.y

Amon Ott — 2013-05-22T07:25:02

Am 14.05.2013 05:28, schrieb Mikko Rinne:

Could you please retry with "secure delete" support disabled in kernel
config? I suspect there might be something related.

Amon.

Re: CVE-2013-2094: Linux privilege escalation

Amon Ott — 2013-05-18T07:18:27

Am 18.05.2013 03:25, schrieb Mikko Rinne:

Just pushed latest 3.0, 3.2 and 3.4 to git repos.


Amon.

CVE-2013-2094: Linux privilege escalation

Mikko Rinne — 2013-05-18T01:25:14

Hi,

few days ago a quite serious linux kernel vulnerability was announced that
goes all the way from 2.6.37 to 3.8.9;

-
https://isc.sans.edu/diary/CVE-2013-2094%3A+Linux+privilege+escalation/15803

Has this been fixed in RSBAC enabled kernels?

Re: A problem when pulling linux-3.8.y

Jens Kasten — 2013-05-16T22:51:33

Hi,

I try the lastest git from linux-3.9.y.
Somehow its feel slow with this kernel.
 
Am Mittwoch, den 15.05.2013, 12:15 +0200 schrieb Amon Ott:

Re: A problem when pulling linux-3.8.y

Mikko Rinne — 2013-05-15T13:18:40

Actually,

Sorry for spamming this mailing list, but I didnt test 3.9 completely before
posting last time;

I still get same error I reported yesterday regarding FF policy module. It's
not fixed when using it on hardmode.

Now Imma go stfu, before you guys ignore me. :)



-----Original Message-----
From: rsbac-bounces< at >rsbac.org [mailto:rsbac-bounces< at >rsbac.org] On Behalf Of
Mikko Rinne
Sent: 15. toukokuuta 2013 15:22
To: 'RSBAC Discussion and Announcements'
Subject: Re: [rsbac] A problem when pulling linux-3.8.y

Thanks,

I just tried latest 3.9 series from git repo, and it seems that a problem
with FF policy module I reported yesterday is fixed, I managed to pull a
test server up with it. 

Which is funny, I spent all night / this morning migrating FF rules to ACL,
and got it to work just as smoothly. :)

Thanks a lot tho!


-----Original Message-----
From: rsbac-bounces< at >rsbac.org [mailto:rsbac-bounces< at >rsbac.org] On Behalf Of
Amon Ott
Sent: 15. toukokuuta 2013 13:15
To: RSBAC Discussion and Announcements
Su

Re: A problem when pulling linux-3.8.y

Mikko Rinne — 2013-05-15T12:21:35

Thanks,

I just tried latest 3.9 series from git repo, and it seems that a problem
with FF policy module I reported yesterday is fixed, I managed to pull a
test server up with it. 

Which is funny, I spent all night / this morning migrating FF rules to ACL,
and got it to work just as smoothly. :)

Thanks a lot tho!


-----Original Message-----
From: rsbac-bounces< at >rsbac.org [mailto:rsbac-bounces< at >rsbac.org] On Behalf Of
Amon Ott
Sent: 15. toukokuuta 2013 13:15
To: RSBAC Discussion and Announcements
Subject: Re: [rsbac] A problem when pulling linux-3.8.y

Am 14.05.2013 01:56, schrieb Mikko Rinne:

git pull --rebase

After updating the git version on the server, I have successfully cloned
3.8 as well as the new 3.9 uploaded yesterday. Please retry.

BTW, in 3.8 and 3.9, the missing log character has been fixed.


Amon.
--
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22
_______________________________________________
rsbac mailing list
rsbac< at >rsbac.org
http://www.rsbac.org/mailman/listinfo/rsbac

Re: A problem when pulling linux-3.8.y

Amon Ott — 2013-05-15T10:15:04

Am 14.05.2013 01:56, schrieb Mikko Rinne:

git pull --rebase

After updating the git version on the server, I have successfully cloned
3.8 as well as the new 3.9 uploaded yesterday. Please retry.

BTW, in 3.8 and 3.9, the missing log character has been fixed.


Amon.

Re: A problem when pulling linux-3.8.y

Jens Kasten — 2013-05-14T09:15:07

Hi,

on evening I will look on my setup. I think I have the FF module 
enabled too but is booting.


Am 2013-05-14 05:28, schrieb Mikko Rinne:

Re: A problem when pulling linux-3.8.y

Mikko Rinne — 2013-05-14T02:16:14

Hey,

Sorry for spamming this mailing list, but;

I finally managed to clone linux-3.8.y (dont know if someone fixed it or
so), but I've came across a new problem which seems to persist in 3.7.y as
well, I tried to clone 3.7.y which currently runs in rsbac-3.7.10+ version.

- I have AUTH, ACL, FF and CAP modules enabled
- Whenever I boot with softmode on, I got no problems
- Regardless which options I try with these modules enabled, I always get
"rsbac boot cannot set terminal process group (-1) inappropriate ioctl for
device" -error on boot. And like I said, when I have rsbac_softmode enabled
in the command line, it boots with no problem, so it's not a problem with
the system, but within a kernel
- I'm not using any initrd files

My grub.conf goes pretty much like this: