headers
John Ogness | 2 Mar 2005 22:03
Picon

2.0.6-pre1 posted

Hi,

With the release of Linux 2.6.11 comes another change in the LSM API. In 
order to properly support stacking, Dazuko needs to implement the entire 
LSM API. For this reason a new pre-release (2.0.6-pre1) has been posted.

I am no longer actively working on the 2.0.x series, so this is just a 
minor change to support Linux 2.6.11. Unless someone reports a problem, 
this will most likely become the official 2.0.6 version.

On a side note, I am just about ready to post a new pre-release of 
2.1.0, which will have full support for trusted applications. This will 
allow processes to register with Dazuko but not be required to perform 
file access control. This is particulary useful for anti-virus software, 
where the scanning process may not the same process as the file access 
control process.

John Ogness

--

-- 
Dazuko Maintainer
Permalink | Reply | 2 comments |
headers
Dirk Vornheder | 10 Mar 2005 16:35
Picon

Compile dazuko fails

Hi !

Compile dazuko fails after using kernel 2.6.11.2:

make -C /lib/modules/2.6.11.2/build SUBDIRS=/privat/kernel/dazuko-2.0.6-pre1 
modules
make[1]: Entering directory `/privat/kernel/linux-2.6.11.2'
  CC [M]  /privat/kernel/dazuko-2.0.6-pre1/dazuko_xp.o
  CC [M]  /privat/kernel/dazuko-2.0.6-pre1/dazuko_linux26_lsm.o
  CC [M]  /privat/kernel/dazuko-2.0.6-pre1/dazuko_linux26.o
  LD [M]  /privat/kernel/dazuko-2.0.6-pre1/dazuko.o
  Building modules, stage 2.
  MODPOST
*** Warning: 
"dazuko_security_bprm_post_apply_creds" [/privat/kernel/dazuko-2.0.6-pre1/dazuko.ko] 
undefined!
  CC      /privat/kernel/dazuko-2.0.6-pre1/dazuko.mod.o
  LD [M]  /privat/kernel/dazuko-2.0.6-pre1/dazuko.ko
make[1]: Leaving directory `/privat/kernel/linux-2.6.11.2'
touch dummy_rule.o

Dirk
Permalink | Reply | 1 comment |
headers
John Ogness | 10 Mar 2005 16:57
Picon

Re: Compile dazuko fails

Dirk Vornheder wrote:
> Compile dazuko fails after using kernel 2.6.11.2:
> 
> *** Warning: 
> "dazuko_security_bprm_post_apply_creds" [/privat/kernel/dazuko-2.0.6-pre1/dazuko.ko] 
> undefined!

Hi,

Could you post a gzip'd version of your "security.h" file?

/lib/modules/2.6.11.2/build/include/linux/security.h

I am curious what your LSM API looks like.

John Ogness

--

-- 
Dazuko Maintainer
Permalink | Reply | 0 comments |
headers
John Ogness | 10 Mar 2005 17:46
Picon

Re: Compile dazuko fails

Dirk Vornheder wrote:
>>>Compile dazuko fails after using kernel 2.6.11.2:
>>>
>>>*** Warning:
>>>"dazuko_security_bprm_post_apply_creds"
>>>[/privat/kernel/dazuko-2.0.6-pre1/dazuko.ko] undefined!

Congratulations! Aparently you are the first person to try to compile Dazuko 
with 2.6.11. There was a typo in one of the prototypes. It has been fixed. I 
have also posted 2.0.6-pre2 with the fix included.

Thanks for pointing this out. Please let me know if it works ok for you now.

John Ogness

--

-- 
Dazuko Maintainer
Permalink | Reply | 1 comment |
headers
Dirk Vornheder | 11 Mar 2005 18:29
Picon

Re: Compile dazuko fails


> >>>Compile dazuko fails after using kernel 2.6.11.2:
> >>>
> >>>*** Warning:
> >>>"dazuko_security_bprm_post_apply_creds"
> >>>[/privat/kernel/dazuko-2.0.6-pre1/dazuko.ko] undefined!
>
> Congratulations! Aparently you are the first person to try to compile
> Dazuko with 2.6.11. There was a typo in one of the prototypes. It has been
> fixed. I have also posted 2.0.6-pre2 with the fix included.
>
> Thanks for pointing this out. Please let me know if it works ok for you
> now.
>

It works.

Thanks,

Dirk
Permalink | Reply | 0 comments |
headers
Calin A. Culianu | 18 Mar 2005 16:11

Re: 2.0.6-pre1 posted


>
> On a side note, I am just about ready to post a new pre-release of 2.1.0, 
> which will have full support for trusted applications. This will allow 
> processes to register with Dazuko but not be required to perform file access 
> control. This is particulary useful for anti-virus software, where the 
> scanning process may not the same process as the file access control process.
>

This seems pretty useful.  I am actually trying to implement a file access 
control daemon that talks to clamd for virus scanning (I find clamd's 
clamuko facility lacking some performance features).  Anyway it would be 
nice to be able to get the entire clamd group of processes (they are all 
threads) to be 'trusted' and not create dazuko events.  Is it possible to 
indicate that a whole process group is trusted with 2.1.0-birthday?  I 
guess I should grok the sources and see...

-Calin
Permalink | Reply | 1 comment |
headers
John Ogness | 18 Mar 2005 16:57
Picon

Re: 2.0.6-pre1 posted

Calin A. Culianu wrote:
> I am actually trying to implement a file 
> access control daemon that talks to clamd for virus scanning (I find 
> clamd's clamuko facility lacking some performance features).  Anyway it 
> would be nice to be able to get the entire clamd group of processes 
> (they are all threads) to be 'trusted' and not create dazuko events.  Is 
> it possible to indicate that a whole process group is trusted with 
> 2.1.0-birthday?

Hi,

Trusted apps are not supported in the 2.1.0-birthday (pre2) version. It is 
only available through CVS right now. But this weekend I plan on posting 
pre3, which has the complete trusted app API. I still need to write 
documentation and an example program to demonstrate how to use the trusted 
app interface.

John Ogness

--

-- 
Dazuko Maintainer
Permalink | Reply | 0 comments |
headers
Dirk Vornheder | 18 Mar 2005 17:28
Picon

Compile dazuko fails under kernel 2.6.12-rc1

Hi !

Compile dazuko fails under kernel 2.6.12-rc1:

make -C /lib/modules/2.6.12-rc1/build SUBDIRS=/privat/kernel/dazuko-2.0.6-pre2 
modules
make[1]: Entering directory `/backup/privat/kernel/linux-2.6.12-rc1'
  CC [M]  /privat/kernel/dazuko-2.0.6-pre2/dazuko_xp.o
  CC [M]  /privat/kernel/dazuko-2.0.6-pre2/dazuko_linux26_lsm.o
In file included 
from /privat/kernel/dazuko-2.0.6-pre2/dazuko_linux26_lsm.c:20:
/privat/kernel/dazuko-2.0.6-pre2/dazuko_linux26_lsm.h:457: warning: 
initialization from incompatible pointer type
/privat/kernel/dazuko-2.0.6-pre2/dazuko_linux26_lsm.h:458: warning: 
initialization from incompatible pointer type
/privat/kernel/dazuko-2.0.6-pre2/dazuko_linux26_lsm.c: In function 
`dazuko_security_file_mmap':
/privat/kernel/dazuko-2.0.6-pre2/dazuko_linux26_lsm.c:566: error: too few 
arguments to function
/privat/kernel/dazuko-2.0.6-pre2/dazuko_linux26_lsm.c: In function 
`dazuko_security_file_mprotect':
/privat/kernel/dazuko-2.0.6-pre2/dazuko_linux26_lsm.c:573: error: too few 
arguments to function
make[2]: *** [/privat/kernel/dazuko-2.0.6-pre2/dazuko_linux26_lsm.o] Error 1
make[1]: *** [_module_/privat/kernel/dazuko-2.0.6-pre2] Error 2
make[1]: Leaving directory `/backup/privat/kernel/linux-2.6.12-rc1'
make: *** [dummy_rule.o] Error 2

Dirk
(Continue reading)

Permalink | Reply | 2 comments |
headers
John Ogness | 18 Mar 2005 19:39
Picon

Re: Compile dazuko fails under kernel 2.6.12-rc1

Dirk Vornheder wrote:
> Compile dazuko fails under kernel 2.6.12-rc1:

Hi,

I have added the new 2.6.12 LSM API changes in CVS. I will be releasing 
2.0.6 this weekend. It would be great if you could try out the new 
version from CVS. You can check out the CVS version with:

$ env CVS_RSH="ssh" cvs -z3 \
-d:ext:anoncvs <at> subversions.gnu.org:/cvsroot/dazuko co dazuko

Then you should copy the following files:

dazuko_linux26_lsm.c
dazuko_linux26_lsm.h
linux_lsm_conf

from the CVS version into the 2.0.6-pre2 directory. Then rebuild 
2.0.6-pre2 with:

$ ./configure
$ make

John Ogness

--

-- 
Dazuko Maintainer
Permalink | Reply | 1 comment |
headers
Dirk Vornheder | 20 Mar 2005 21:18
Picon

Re: Compile dazuko fails under kernel 2.6.12-rc1


> Dirk Vornheder wrote:
> > Compile dazuko fails under kernel 2.6.12-rc1:
>
> Hi,
>
> I have added the new 2.6.12 LSM API changes in CVS. I will be releasing
> 2.0.6 this weekend. It would be great if you could try out the new
> version from CVS. You can check out the CVS version with:
>
> $ env CVS_RSH="ssh" cvs -z3 \
> -d:ext:anoncvs <at> subversions.gnu.org:/cvsroot/dazuko co dazuko
>
> Then you should copy the following files:
>
> dazuko_linux26_lsm.c
> dazuko_linux26_lsm.h
> linux_lsm_conf
>
> from the CVS version into the 2.0.6-pre2 directory. Then rebuild
> 2.0.6-pre2 with:
>
> $ ./configure
> $ make
>
> John Ogness

It works.

Thanks,
(Continue reading)

Permalink | Reply | 0 comments |

Gmane