Linux Intrusion Detection System

Ned Navas | 1 Sep 2005 21:54

a5 You didn't know

He has been watchi		se last seven years. Understand this?
	ng you struggle the

see it.

headers

Kazuki Omo | 2 Sep 2005 16:41

Re: LIDS 2.2.1 for 2.6.13 is released.

Folks, 

We've upgraded kernel RPM packages with LIDS.

You can download them from;

http://www.selinux.gr.jp/LIDS-JP/download.html

Regards.

On Mon, Aug 29, 2005 at 12:12:38AM -0700, Huagang Xie wrote:
> Hello,
> 
> This new lids version fixed a capability error which cause sshd login failure.
> Thanks to Omok for the bug reporting.
> 
> The webpage is not updated yet, you can get it from 
> 
>  http://www.lids.org/download/v2.6/2.6.13/
> 
> Enjoy it
> 
> Huagang

--

-- 
Kazuki Omo: omok <at> honto.info
LIDS Japanese Information:
Japanese: http://www.selinux.gr.jp/LIDS-JP/index.html
English:  http://www.selinux.gr.jp/LIDS-JP/LIDS_en/index.html

-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf

headers

Kazuki Omo | 2 Sep 2005 16:40

Re: ACL problem on 2.2.1rc3

Dear, Xie,

On Thu, Aug 25, 2005 at 09:43:36PM -0700, Huagang Xie wrote:
> On Thu, Jul 28, 2005 at 04:10:25PM +0900, omok wrote:
> > 1. I want to hide /var/www directory from any program without httpd. 
> > Though I made following ACLs;
> > 
> >  lidsconf -A -o /var/www -j DENY
> >  lidsconf -A -s /usr/sbin/httpd -o /var/www -j READONLY
> > 
> > Yes... above ACLs were working fine on both a.) and b.)
> > 
> > 2. Now, I want to hide /var/www/html/hide from httpd. Then I added following
> > ACL;
> > 
> >  lidsconf -A -s /usr/sbin/httpd -o /var/www/html/hide -j DENY
> 
> You may need to do 
> 
>  lidsconf -A -o /var/www/html/hide -j DENY

But, I've already added "DENY" to /var/www. Though /var/www/html
would inherit "DENY" from /var/www, right?

Also, the ACL was working on LIDS-1.2.2+2.4.29.

Regards,
--

-- 
Kazuki Omo: omok <at> honto.info
LIDS Japanese Information:
Japanese: http://www.selinux.gr.jp/LIDS-JP/index.html
English:  http://www.selinux.gr.jp/LIDS-JP/LIDS_en/index.html

-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf

headers

Sotiria Nolf | 3 Sep 2005 01:02

Re: Good Day - Pharmaceùtical

Vi

Ul

Xa

Ci

Va

Am

Le

Pr

Me

Ce

ag

tr

na

al

li

bi

vi

op

ri

le

ra

am

x

is

um

en

tra

ecia

dia

brex

69

85

12

99

85

68

99

64

99

72

.85

.55

3.45

.75

.45

.00

.94

.95

.96

.00

http://www.fleoveare.com

headers

info | 5 Sep 2005 13:26

$BIwB/5U1g6f3ZIt(B

$B=w <at> -$?$A$N <at> -M_H/;6$r$*<jEA$$!*(B
$B=w<RD9!"<RD9Na>n!"7]G=?M!"(BAV$B=wM%$J$I$H$*CN$j9g$$$G$-$k <at> d9%$J%A%c%s%9!*(B
$B(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(B
$B"!%R%^$G$*6b;}$A=w <at> -$N <at> -M_$rK~$?$7$F$"$2$F$/$ <at> $5$$!*(B
$B"!C/$G$b4JC1!*L5NAEPO?!*(B
$B"!%Q%=%3%s!&7HBSA45!<o$G%a!<%k$,Aw$l$^$9!*(B
$B"!8D?M>pJs$N%;%-%e%j%F%#!<K|A4!*(B
$B"!$*=;$^$$$NCO0h$+$i=w <at> -$rC5$;$^$9!*(B
$B"!=w <at> -$N?t$,05E]E*$J$N$G!"CK <at> -$OBT$C$F$$$k$ <at> $1$G$b$*Aj<j$,%2%C%H$G$-$^$9!#(B
$B"!6bA,LdBj$, <at> 8$8$k2DG= <at> -$,$"$k$N$G(B18$B:PL$K~$NCK=w$NEPO?$O$41sN8$/$ <at> $5$$!#(B

$B!!!!!!(Bhttp://80607.jp/dt/giaku/enjo.html
$B(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(B
$B"v$*6b;}$A$G%;%C%/%9$,9%$-$J=w <at> -$NJ}$KO/Js$G$9"v(B
$B6u$$$F$$$k;~4V$rMxMQ$7$F%;%C%/%9$KNe$s$G$/$ <at> $5$$!#(B $B%$%s%?!<%M%C%H$GAGE($JCK <at> -$r$4>R2p$$$?$7$^$9!#F~$j8}"M(B
$B!!!!!!(Bhttp://80607.jp/dt/giaku/enjo.html
$B"v$*6b$K:$$C$F!"M7$S$b9%$-$JCK <at> -$NAGE($J%3!<%J!<"v(B
$B%3%3$+$i=w<RD9!"<RD9Na>n!"7]G=?M!"(BAV$B=wM%$J$I$H$*CN$j9g$$$G$-$k <at> d9%$J%A%c%s%9!*M7$S$J$,$i$b!o$b%2%C%H!*!J$?$ <at> :#F8Dg$/$s$OBg?M5$!"$?$/$5$s$N=w <at> -$KG.K>$5$l$F$$$k!K(B
$B!!!!!!(Bhttp://80607.jp/dt/giaku/enjo.html
$B(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(B
$BCK <at> -$X$4>R2p$9$k%3!<%J!<(B
$B!&!D(,(,"!!!$*6b;}$A=w <at> -$N$+$7$3$$8} <at> b$-J}!!"!(,(,!D!&(B
$B!&%a!<%k$G==J,$K%3%_%e%K%1!<%7%g%s$r$H$j$^$7$g$&!#B(%;%C%/%98r>D$OI]$,$i$l$k%1!<%9$,$h$/$"$j$^$9!#(B
$B!&4pK\E*$K%(%C%A <at> .8yN($OB>$KNc$r$_$J$$$[$I6K$a$F9b$$%5%$%H$G$9$N$G!"$"$;$i$:!"$8$C$/$j9T$/$H5U6L$NMA$OL\A0$G$9!#$,$s$P$C$F$/$ <at> $5$$!#(B
$BCK <at> -$N$4EP>lF~$j8}"M(B
$B!!!!!!(Bhttp://80607.jp/dt/giaku/enjo.html
$B(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(B

$B:#8e<u?.5qH]$9$kJ}$O(Bdfg_497 <at> hotmail.com$B$X$4JV?.$/$ <at> $5$$(B

-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf

headers

Sonixxfx | 6 Sep 2005 15:48

Systems stops booting while displaying "Filesystem is clean."

Hi,

I am configuring lids on my kubuntu system, but since yesterday my system wont boot anymore when i use a lids enabled kernel or when I boot with ACL_DISCOVERY on. The system stops while or after checking my reiserfs filesystem where / is located. The last message I see when the system stops booting is: filesystem is clean.

My system boots fine with lids=0.

Can someone help me to find a solution herefor? It seems I have setup lids correctly for the things that start before the filesystem is checked because I get no errors on that. Can someone also tell me what log I should check to find info about the boot process? I know about dmesg but do not know about a log file that provides info about the init scripts and such.

I have a feeling the cause of this is that I have disabled every capability in every lids cap file. I am setting up acl's to only allow the things that are nessesarry to have a working system. So I want to dissallow as much as I can. I am not sure if it is ok to dissalow every capability in the cap files.

I can provide logs later if nessesarry.

Thanks!!!

Regards,

Ben

headers

k w | 10 Sep 2005 14:00

kernel Oops after installing lids

Hello

I recently decided to test out lids. I installed debian sarge on one
machine downloaded the linux-2.6.13.tar.bz2 and  lids-2.2.1-2.6.13.tar.gz, and compiled and
installed a lids kernel.

I rebooted in learning mode and all seemed fine until I started to
look at the machines logs. I got the following:

Sep  7 13:17:01 placebo kernel: LIDS_ACL_DISCOVERY:[state 2]199610:3145731:cron:1:0:16864:3145731:shadow:0-0
Sep  7 13:17:01 placebo /USR/SBIN/CRON[2100]: (root) CMD (   run-parts --report /etc/cron.hourly)
Sep  7 13:17:01 placebo kernel: LIDS_ACL_DISCOVERY:[state 2]162942:3145731:bash:1:0:162885:3145731:run-parts:0-0
Sep  7 13:17:01 placebo kernel: Unable to handle kernel NULL pointer dereference at virtual address 00000008
Sep  7 13:17:01 placebo kernel: printing eip:
Sep  7 13:17:01 placebo kernel: c01b002c
Sep  7 13:17:01 placebo kernel: *pde = 00000000
Sep  7 13:17:01 placebo kernel: Oops: 0000 [#1]
Sep  7 13:17:01 placebo kernel: CPU:    0
Sep  7 13:17:01 placebo kernel: EIP:    0060:[<c01b002c>]    Not tainted VLI
Sep  7 13:17:01 placebo kernel: EFLAGS: 00010246   (2.6.13lids-test)
Sep  7 13:17:01 placebo kernel: EIP is at lids_alert+0x9c/0x3d0
Sep  7 13:17:01 placebo kernel: eax: 00000000   ebx: 00000002   ecx: 00300003   edx: 00000064
Sep  7 13:17:01 placebo kernel: esi: 00000001   edi: c3941160   ebp: c3fc855c   esp: c2edbe24
Sep  7 13:17:01 placebo kernel: ds: 007b   es: 007b   ss: 0068
Sep  7 13:17:01 placebo kernel: Process run-parts (pid: 2100, threadinfo=c2eda000 task=c3ff85b0)
Sep  7 13:17:01 placebo kernel: Stack: 00000064 00000001 00027c45 00300003 c3941160 ffffffff 00027c45 c3fc8574
Sep  7 13:17:01 placebo kernel: c01acc81 00000001 00027c45 00300003 c3941160 c0317f06 c3fc8574 c3fc855c
Sep  7 13:17:01 placebo kernel: 00000004 00000000 00000100 c01536d9 c3fc855c 00000004 00000000 c2eda000
Sep  7 13:17:01 placebo kernel: Call Trace:
Sep  7 13:17:01 placebo kernel: [<c01acc81>] lids_inode_permission+0xd1/0x140
Sep  7 13:17:01 placebo kernel: [<c01536d9>] permission+0x89/0xb0
Sep  7 13:17:01 placebo kernel: [<c01512c0>] flush_old_exec+0x270/0x6f0
Sep  7 13:17:01 placebo kernel: [<c0150ecb>] kernel_read+0x3b/0x50
Sep  7 13:17:01 placebo kernel: [<c016e716>] load_elf_binary+0x2e6/0xc30
Sep  7 13:17:01 placebo kernel: [<c0150a2c>] copy_strings+0x16c/0x200
Sep  7 13:17:01 placebo kernel: [<c015195f>] search_binary_handler+0x4f/0xe0
Sep  7 13:17:01 placebo kernel: [<c0151b63>] do_execve+0x173/0x230
Sep  7 13:17:01 placebo kernel: [<c01015de>] sys_execve+0x2e/0x70
Sep  7 13:17:01 placebo kernel: [<c01028c9>] syscall_call+0x7/0xb
Sep  7 13:17:01 placebo kernel: Code: c4 0c 8b 35 d4 f3 42 c0 85 f6 75 04 5b 5e 5f c3 e8 da fd ff ff 57 8b 4c 24 1c 51 8b 54
24 1c 52 8d 50 64 53 8b 1d 4c 18 35 c0 52
 <8b> 50 08 8b 92 94 00 00 00 8b 7a 08 57 8b 40 08 8b 70 20 56 53

and the followingSep  7 14:17:01 placebo kernel: LIDS: cron (dev 3:3 inode 199610) pid 2128 ppid 1831
uid/gid (0/0) on (NULL tty) : attempt to open shadow for reading
Sep  7 14:17:01 placebo kernel: LIDS_ACL_DISCOVERY:[state 2]199610:3145731:cron:1:0:16864:3145731:shadow:0-0
Sep  7 14:17:01 placebo /USR/SBIN/CRON[2129]: (root) CMD (   run-parts --report /etc/cron.hourly)
Sep  7 14:17:01 placebo kernel: LIDS: bash (dev 3:3 inode 162942) pid 2129 ppid 2128 uid/gid (0/0) on (NULL
tty) : attempt to open run-parts for reading  - logging di
sabled for 60s
Sep  7 14:17:01 placebo kernel: LIDS_ACL_DISCOVERY:[state 2]162942:3145731:bash:1:0:162885:3145731:run-parts:0-0
Sep  7 14:17:01 placebo kernel: Unable to handle kernel NULL pointer dereference at virtual address 00000008
Sep  7 14:17:01 placebo kernel: printing eip:
Sep  7 14:17:01 placebo kernel: c01b002c
Sep  7 14:17:01 placebo kernel: *pde = 00000000
Sep  7 14:17:01 placebo kernel: Oops: 0000 [#2]
Sep  7 14:17:01 placebo kernel: CPU:    0
Sep  7 14:17:01 placebo kernel: EIP:    0060:[<c01b002c>]    Not tainted VLI
Sep  7 14:17:01 placebo kernel: EFLAGS: 00010246   (2.6.13lids-test)
Sep  7 14:17:01 placebo kernel: EIP is at lids_alert+0x9c/0x3d0
Sep  7 14:17:01 placebo kernel: eax: 00000000   ebx: 00000002   ecx: 00300003   edx: 00000064
Sep  7 14:17:01 placebo kernel: esi: 00000001   edi: c3941160   ebp: c3fc855c   esp: c1ff9e24
Sep  7 14:17:01 placebo kernel: ds: 007b   es: 007b   ss: 0068
Sep  7 14:17:01 placebo kernel: Process run-parts (pid: 2129, threadinfo=c1ff8000 task=c3ff85b0)
Sep  7 14:17:01 placebo kernel: Stack: 00000064 00000001 00027c45 00300003 c3941160 ffffffff 00027c45 c3fc8574
Sep  7 14:17:01 placebo kernel: c01acc81 00000001 00027c45 00300003 c3941160 c0317f06 c3fc8574 c3fc855c
Sep  7 14:17:01 placebo kernel: 00000004 00000000 00000100 c01536d9 c3fc855c 00000004 00000000 c1ff8000
Sep  7 14:17:01 placebo kernel: Call Trace:
Sep  7 14:17:01 placebo kernel: [<c01acc81>] lids_inode_permission+0xd1/0x140
Sep  7 14:17:01 placebo kernel: [<c01536d9>] permission+0x89/0xb0
Sep  7 14:17:01 placebo kernel: [<c01512c0>] flush_old_exec+0x270/0x6f0
Sep  7 14:17:01 placebo kernel: [<c0150ecb>] kernel_read+0x3b/0x50
Sep  7 14:17:01 placebo kernel: [<c016e716>] load_elf_binary+0x2e6/0xc30
Sep  7 14:17:01 placebo kernel: [<c0150a2c>] copy_strings+0x16c/0x200
Sep  7 14:17:01 placebo kernel: [<c015195f>] search_binary_handler+0x4f/0xe0
Sep  7 14:17:01 placebo kernel: [<c0151b63>] do_execve+0x173/0x230
Sep  7 14:17:01 placebo kernel: [<c01015de>] sys_execve+0x2e/0x70
Sep  7 14:17:01 placebo kernel: [<c01028c9>] syscall_call+0x7/0xb
Sep  7 14:17:01 placebo kernel: Code: c4 0c 8b 35 d4 f3 42 c0 85 f6 75 04 5b 5e 5f c3 e8 da fd ff ff 57 8b 4c 24 1c 51 8b 54
24 1c 52 8d 50 64 53 8b 1d 4c 18 35 c0 52
 <8b> 50 08 8b 92 94 00 00 00 8b 7a 08 57 8b 40 08 8b 70 20 56 53:

I tried to reboot the machine but it never came up again. I
was only able to get to the machine today and it infact had
gone into single user mode.

Anyway, it running on the default debian kernel at the moment
and was wondering if anyone had any idea what was causing the kernel to oops. Is the fault with lids or is the
solution to this
problem to be found elsewhere?

t: kd

_______________________________________________________________ 
What American state is known as the Lone Star State?

http:// 

-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf

headers

Huagang Xie | 11 Sep 2005 02:41

Re: kernel Oops after installing lids

Hello,

Can you disable the DISCOVERY mode and try again? 

Thanks,
Huagang

On Sat, Sep 10, 2005 at 01:00:44PM +0100, k w wrote:
> machine downloaded the linux-2.6.13.tar.bz2 and  lids-2.2.1-2.6.13.tar.gz, and compiled and
installed a lids kernel.
> 
> I rebooted in learning mode and all seemed fine until I started to
> look at the machines logs. I got the following:
> 
> Sep  7 13:17:01 placebo kernel: LIDS_ACL_DISCOVERY:[state 2]199610:3145731:cron:1:0:16864:3145731:shadow:0-0
> Sep  7 13:17:01 placebo /USR/SBIN/CRON[2100]: (root) CMD (   run-parts --report /etc/cron.hourly)
> Sep  7 13:17:01 placebo kernel: LIDS_ACL_DISCOVERY:[state 2]162942:3145731:bash:1:0:162885:3145731:run-parts:0-0
> Sep  7 13:17:01 placebo kernel: Unable to handle kernel NULL pointer dereference at virtual address 00000008
> Sep  7 13:17:01 placebo kernel: printing eip:
> Sep  7 13:17:01 placebo kernel: c01b002c
> Sep  7 13:17:01 placebo kernel: *pde = 00000000
> Sep  7 13:17:01 placebo kernel: Oops: 0000 [#1]
> Sep  7 13:17:01 placebo kernel: CPU:    0
> Sep  7 13:17:01 placebo kernel: EIP:    0060:[<c01b002c>]    Not tainted VLI
> Sep  7 13:17:01 placebo kernel: EFLAGS: 00010246   (2.6.13lids-test)
> Sep  7 13:17:01 placebo kernel: EIP is at lids_alert+0x9c/0x3d0
> Sep  7 13:17:01 placebo kernel: eax: 00000000   ebx: 00000002   ecx: 00300003   edx: 00000064
> Sep  7 13:17:01 placebo kernel: esi: 00000001   edi: c3941160   ebp: c3fc855c   esp: c2edbe24
> Sep  7 13:17:01 placebo kernel: ds: 007b   es: 007b   ss: 0068
> Sep  7 13:17:01 placebo kernel: Process run-parts (pid: 2100, threadinfo=c2eda000 task=c3ff85b0)
> Sep  7 13:17:01 placebo kernel: Stack: 00000064 00000001 00027c45 00300003 c3941160 ffffffff 00027c45 c3fc8574
> Sep  7 13:17:01 placebo kernel: c01acc81 00000001 00027c45 00300003 c3941160 c0317f06 c3fc8574 c3fc855c
> Sep  7 13:17:01 placebo kernel: 00000004 00000000 00000100 c01536d9 c3fc855c 00000004 00000000 c2eda000
> Sep  7 13:17:01 placebo kernel: Call Trace:
> Sep  7 13:17:01 placebo kernel: [<c01acc81>] lids_inode_permission+0xd1/0x140
> Sep  7 13:17:01 placebo kernel: [<c01536d9>] permission+0x89/0xb0
> Sep  7 13:17:01 placebo kernel: [<c01512c0>] flush_old_exec+0x270/0x6f0
> Sep  7 13:17:01 placebo kernel: [<c0150ecb>] kernel_read+0x3b/0x50
> Sep  7 13:17:01 placebo kernel: [<c016e716>] load_elf_binary+0x2e6/0xc30
> Sep  7 13:17:01 placebo kernel: [<c0150a2c>] copy_strings+0x16c/0x200
> Sep  7 13:17:01 placebo kernel: [<c015195f>] search_binary_handler+0x4f/0xe0
> Sep  7 13:17:01 placebo kernel: [<c0151b63>] do_execve+0x173/0x230
> Sep  7 13:17:01 placebo kernel: [<c01015de>] sys_execve+0x2e/0x70
> Sep  7 13:17:01 placebo kernel: [<c01028c9>] syscall_call+0x7/0xb
> Sep  7 13:17:01 placebo kernel: Code: c4 0c 8b 35 d4 f3 42 c0 85 f6 75 04 5b 5e 5f c3 e8 da fd ff ff 57 8b 4c 24 1c 51 8b 54
24 1c 52 8d 50 64 53 8b 1d 4c 18 35 c0 52

headers

Huagang Xie | 11 Sep 2005 02:41

Re: Systems stops booting while displaying "Filesystem is clean."

Looks like the Discovery mode causing the problem, can you disable the
discovery mode and try a again?

Thanks
Huagang

On Tue, Sep 06, 2005 at 03:48:03PM +0200, Sonixxfx wrote:
> Hi,
>  I am configuring lids on my kubuntu system, but since yesterday my system 
> wont boot anymore when i use a lids enabled kernel or when I boot with 
> ACL_DISCOVERY on. The system stops while or after checking my reiserfs 
> filesystem where / is located. The last message I see when the system stops 
> booting is: filesystem is clean. 
> My system boots fine with lids=0.
>  Can someone help me to find a solution herefor? It seems I have setup lids 
> correctly for the things that start before the filesystem is checked because 
> I get no errors on that. Can someone also tell me what log I should check to 
> find info about the boot process? I know about dmesg but do not know about a 
> log file that provides info about the init scripts and such.
>  I have a feeling the cause of this is that I have disabled every capability 
> in every lids cap file. I am setting up acl's to only allow the things that 
> are nessesarry to have a working system. So I want to dissallow as much as I 
> can. I am not sure if it is ok to dissalow every capability in the cap 
> files.
>  I can provide logs later if nessesarry.
>  Thanks!!!
>  Regards,
>  Ben

headers

k w | 11 Sep 2005 05:33

Re: kernel Oops after installing lids

Ok!

I'll try that and get back to you. It may take a while though,
I have to go to work soon and the machine I am working 
with take a few hours to compile a kernel.

Thanks for the suggestion.

t: kd

On Sat, 10 Sep 2005 17:41:15 -0700 , Huagang Xie <xie <at> lids.org>  wrote:
>Hello,
>
>Can you disable the DISCOVERY mode and try again? 
>
>Thanks,
>Huagang
>
>On Sat, Sep 10, 2005 at 01:00:44PM +0100, k w wrote:
>> machine downloaded the linux-2.6.13.tar.bz2 and  lids-2.2.1-2.6.13.tar.gz, and compiled and
installed a lids kernel.
>> 
>> I rebooted in learning mode and all seemed fine until I started to
>> look at the machines logs. I got the following:
>> 
>> Sep  7 13:17:01 placebo kernel: LIDS_ACL_DISCOVERY:[state 2]199610:3145731:cron:1:0:16864:3145731:shadow:0-0
>> Sep  7 13:17:01 placebo /USR/SBIN/CRON[2100]: (root) CMD (   run-parts --report /etc/cron.hourly)
>> Sep  7 13:17:01 placebo kernel: LIDS_ACL_DISCOVERY:[state 2]162942:3145731:bash:1:0:162885:3145731:run-parts:0-0
>> Sep  7 13:17:01 placebo kernel: Unable to handle kernel NULL pointer dereference at virtual address 00000008
>> Sep  7 13:17:01 placebo kernel: printing eip:
>> Sep  7 13:17:01 placebo kernel: c01b002c
>> Sep  7 13:17:01 placebo kernel: *pde = 00000000
>> Sep  7 13:17:01 placebo kernel: Oops: 0000 [#1]
>> Sep  7 13:17:01 placebo kernel: CPU:    0
>> Sep  7 13:17:01 placebo kernel: EIP:    0060:[<c01b002c>]    Not tainted VLI
>> Sep  7 13:17:01 placebo kernel: EFLAGS: 00010246   (2.6.13lids-test)
>> Sep  7 13:17:01 placebo kernel: EIP is at lids_alert+0x9c/0x3d0
>> Sep  7 13:17:01 placebo kernel: eax: 00000000   ebx: 00000002   ecx: 00300003   edx: 00000064
>> Sep  7 13:17:01 placebo kernel: esi: 00000001   edi: c3941160   ebp: c3fc855c   esp: c2edbe24
>> Sep  7 13:17:01 placebo kernel: ds: 007b   es: 007b   ss: 0068
>> Sep  7 13:17:01 placebo kernel: Process run-parts (pid: 2100, threadinfo=c2eda000 task=c3ff85b0)
>> Sep  7 13:17:01 placebo kernel: Stack: 00000064 00000001 00027c45 00300003 c3941160 ffffffff 00027c45 c3fc8574
>> Sep  7 13:17:01 placebo kernel: c01acc81 00000001 00027c45 00300003 c3941160 c0317f06 c3fc8574 c3fc855c
>> Sep  7 13:17:01 placebo kernel: 00000004 00000000 00000100 c01536d9 c3fc855c 00000004 00000000 c2eda000
>> Sep  7 13:17:01 placebo kernel: Call Trace:
>> Sep  7 13:17:01 placebo kernel: [<c01acc81>] lids_inode_permission+0xd1/0x140
>> Sep  7 13:17:01 placebo kernel: [<c01536d9>] permission+0x89/0xb0
>> Sep  7 13:17:01 placebo kernel: [<c01512c0>] flush_old_exec+0x270/0x6f0
>> Sep  7 13:17:01 placebo kernel: [<c0150ecb>] kernel_read+0x3b/0x50
>> Sep  7 13:17:01 placebo kernel: [<c016e716>] load_elf_binary+0x2e6/0xc30
>> Sep  7 13:17:01 placebo kernel: [<c0150a2c>] copy_strings+0x16c/0x200
>> Sep  7 13:17:01 placebo kernel: [<c015195f>] search_binary_handler+0x4f/0xe0
>> Sep  7 13:17:01 placebo kernel: [<c0151b63>] do_execve+0x173/0x230
>> Sep  7 13:17:01 placebo kernel: [<c01015de>] sys_execve+0x2e/0x70
>> Sep  7 13:17:01 placebo kernel: [<c01028c9>] syscall_call+0x7/0xb
>> Sep  7 13:17:01 placebo kernel: Code: c4 0c 8b 35 d4 f3 42 c0 85 f6 75 04 5b 5e 5f c3 e8 da fd ff ff 57 8b 4c 24 1c 51 8b
54 24 1c 52 8d 50 64 53 8b 1d 4c 18 35 c0 52

_______________________________________________________________ 
Which footballer was England's first black player? 

http://

-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf

31	May 2013
36	April 2013
32	March 2013
12	February 2013
20	January 2013
22	December 2012
27	November 2012
20	October 2012
10	September 2012
17	August 2012
16	July 2012
20	June 2012
10	May 2012
7	April 2012
21	March 2012
3	February 2012
7	January 2012
8	December 2011
2	October 2011
4	September 2011
1	August 2011
3	July 2011
1	May 2011
13	April 2011
5	March 2011
7	February 2011
3	January 2011
5	December 2010
1	October 2010
16	September 2010
27	August 2010
31	July 2010
52	June 2010
49	May 2010
25	April 2010
15	March 2010
7	February 2010
19	January 2010
22	December 2009
9	November 2009
18	October 2009
14	September 2009
18	August 2009
28	July 2009
24	June 2009
40	May 2009
19	April 2009
12	March 2009
17	February 2009
5	January 2009
40	December 2008
4	November 2008
16	October 2008
25	September 2008
15	August 2008
11	July 2008
3	June 2008
14	May 2008
12	April 2008
2	March 2008
5	February 2008
9	January 2008
6	December 2007
8	November 2007
24	October 2007
17	September 2007
19	August 2007
22	July 2007
10	June 2007
5	May 2007
4	April 2007
1	March 2007
6	February 2007
4	January 2007
13	December 2006
17	November 2006
1	October 2006
3	September 2006
1	August 2006
5	July 2006
9	June 2006
11	May 2006
7	April 2006
9	March 2006
12	February 2006
20	January 2006
15	December 2005
12	November 2005
10	October 2005
27	September 2005
13	August 2005
5	July 2005
51	June 2005
53	May 2005
53	April 2005
35	March 2005
43	February 2005
44	January 2005
43	December 2004
25	November 2004
37	October 2004
40	September 2004
74	August 2004
35	July 2004
50	June 2004
31	May 2004
46	April 2004
69	March 2004
27	February 2004
16	January 2004
35	December 2003
27	November 2003
30	October 2003
30	September 2003
34	August 2003
52	July 2003
39	June 2003
6	May 2003
1	November 2002
4	January 2002

Mon	Tue	Wed	Thu	Fri	Sat	Sun

			1	2	3	4
5	6	7	8	9	10	11
12	13	14	15	16	17	18
19	20	21	22	23	24	25
26	27	28	29	30

a5 You didn't know

Re: LIDS 2.2.1 for 2.6.13 is released.

Re: ACL problem on 2.2.1rc3

Re: Good Day - Pharmaceùtical

$BIwB/5U1g6f3ZIt(B

Systems stops booting while displaying "Filesystem is clean."

kernel Oops after installing lids

Re: kernel Oops after installing lids

Re: Systems stops booting while displaying "Filesystem is clean."

Re: kernel Oops after installing lids

$BIwB/5U1g6f3ZIt(B