Welcome Kazuki Omo to LIDS Team

Hello,

Please welcome Kazuki Omo to join our LIDS Team.  He has been very active in
the lids user mailing list on helping LIDS users and has been packaging lids 
for a long time and he also has been promoting LIDS in Japan with a great effort.

With a strong team and we should be able to provide a more secure, reliable
and user friendly LIDS to our lids users. 

Thanks
Huagang

Re: Welcome Kazuki Omo to LIDS Team

Folks,

I'm very glad to join the LIDS Team. I'll do my best to promote LIDS,
and help LIDS users.

Many Thanks.

OMO

On Sun, Dec 04, 2005 at 12:03:01PM -0800, Huagang Xie wrote:
> Hello,
> 
> Please welcome Kazuki Omo to join our LIDS Team.  He has been very active in
> the lids user mailing list on helping LIDS users and has been packaging lids 
> for a long time and he also has been promoting LIDS in Japan with a great effort.
> 
> With a strong team and we should be able to provide a more secure, reliable
> and user friendly LIDS to our lids users. 
> 
> Thanks
> Huagang
> 

--

-- 
Kazuki Omo: omok <at> honto.info
LIDS Japanese Information:
Japanese: http://www.selinux.gr.jp/LIDS-JP/index.html
English:  http://www.selinux.gr.jp/LIDS-JP/LIDS_en/index.html

-------------------------------------------------------

Does LIDS now require xattr support?

 From the FAQ:
Q: Will LIDS work with a file system other than ext2?

Yes. To quote LIDS co-author Philippe Biondi: ""LIDS works on top of the 
VFS layer, so that it can handle every fs linux supports.""

Is this still true in LIDS 2.2.1 for kernel 2.6, ie will LIDS for 2.6 
work with filesystems without xattrs like cramfs and jffs2?

Thanks!
John Mehaffey
Mobilinux Architect
MontaVista Software

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click

LIDS 2.2.2 for kernel 2.6.14 and lidstools 2.2.7 are released!

Hello,

This version removed obsoleted hooks to be able to compiled under kernel
2.6.14 and fixed a bug which prevent ssh and vsftpd from function correctly.

From this version, lidstools will be removed from the tar ball and will be
released seperately. This time, we release lidstools 2.2.7.

All version could be download in the Download Page at
http://www.lids.org/node/5

Thanks Omo and Sander for the testing. RPMS will be released by Omo. 

Enjoy it and have a nice holiday!

Thanks
Huagang

Re: LIDS 2.2.2 for kernel 2.6.14 and lidstools 2.2.7 are released!

Dear, Folks,

I release new lids-patched kerne RPM and lidstools RPM.
You can download them from

http://www.selinux.gr.jp/LIDS-JP/download.html

There are FedoraCore4, FedoraCore3, CentOS4.2, and
Debian(sarge)-vanilla kernel deb package.

If you have any problem, please let us know.

Please enjoy it! 

Thanks.

OMO

On Thu, Dec 15, 2005 at 11:53:02PM -0800, Huagang Xie wrote:
> Hello,
> 
> This version removed obsoleted hooks to be able to compiled under kernel
> 2.6.14 and fixed a bug which prevent ssh and vsftpd from function correctly.
> 
> From this version, lidstools will be removed from the tar ball and will be
> released seperately. This time, we release lidstools 2.2.7.
> 
> All version could be download in the Download Page at
> http://www.lids.org/node/5
> 

Re: Does LIDS now require xattr support?

>>From the FAQ:
>>Q: Will LIDS work with a file system other than ext2?

>>Yes. To quote LIDS co-author Philippe Binned: ""LIDS works on top of the 
>>VFS layer, so that it can handle every fs linux supports.""

>>Is this still true in LIDS 2.2.1 for kernel 2.6, ie will LIDS for 2.6 
>>work with filesystems without xattrs like cramfs and jffs2?

It is still true. LIDS still support all FS linux supports, even without
xattr support. 

huagang
			

switching to LIDS_GLOBAL

HI all,

I am using lids-2.2.2-2.6.14.tar.gz and  lidstools-2.2.7.tar.gz
with kernel 2.6.14.
now i have booted my PC with lids=0 command line option
and created new policies but when i try to switch to LIDS_GLOBAL
it says following
[root <at> mint2 root]# lidsadm -S -- +LIDS_GLOBAL
SWITCH
enter password:
No global capabilities have changed.
Switching LIDS failed

and it remains same, i am including the file which contains output
of lidsadm -V command 

--

Regards
Aniruddh Singh
System Administrator
Monster.com India Pvt. Ltd.
FC 23, Block B, 1st Floor, Sector 16A
Film City Noida 201301 U.P.

VIEW
                     CAP_CHOWN 1
              CAP_DAC_OVERRIDE 1

Re: switching to LIDS_GLOBAL

Hi,

this is correct behaviour. When you boot the kernel with lids=0 lids is
completely disabled. So, you cannot enable lids using the lidsadm -S --
+LIDS_GLOBAL command. To enable lids you need to reboot without lids=0.

Greets,

Sander Klein

On Sat, December 24, 2005 6:19, Aniruddh Singh said:
> HI all,
>
> I am using lids-2.2.2-2.6.14.tar.gz and  lidstools-2.2.7.tar.gz
> with kernel 2.6.14.
> now i have booted my PC with lids=0 command line option
> and created new policies but when i try to switch to LIDS_GLOBAL
> it says following
> [root <at> mint2 root]# lidsadm -S -- +LIDS_GLOBAL
> SWITCH
> enter password:
> No global capabilities have changed.
> Switching LIDS failed
>
> and it remains same, i am including the file which contains output
> of lidsadm -V command
>
>
> --
>

Re: switching to LIDS_GLOBAL

Hi,

Thanks, but i have one more machine with lids-2.2.1pre1-2.6.9 in which i
can enable or disable lids by lidsadm -S -- +LIDS_GLOBAL or lidsadm -S
-- -LIDS_GLOBAL after booting with lids=0, Is this change in new
version?

On Sat, 2005-12-24 at 19:28 +0100, Sander Klein wrote:
> Hi,
> 
> this is correct behaviour. When you boot the kernel with lids=0 lids is
> completely disabled. So, you cannot enable lids using the lidsadm -S --
> +LIDS_GLOBAL command. To enable lids you need to reboot without lids=0.
> 
> Greets,
> 
> Sander Klein
> 
> 
> On Sat, December 24, 2005 6:19, Aniruddh Singh said:
> > HI all,
> >
> > I am using lids-2.2.2-2.6.14.tar.gz and  lidstools-2.2.7.tar.gz
> > with kernel 2.6.14.
> > now i have booted my PC with lids=0 command line option
> > and created new policies but when i try to switch to LIDS_GLOBAL
> > it says following
> > [root <at> mint2 root]# lidsadm -S -- +LIDS_GLOBAL
> > SWITCH
> > enter password:

Capabilities

HI, all

i have some problem regrading lids capabilities, like /sbin/insmod need
CAP_SYS_MODULE if give this capabilities to /sbin/insmod from lids.conf
it dows not work, but if i enable this capability globally it works fine
any idea?
--

-- 
Regards
Aniruddh Singh
System Administrator
Monster.com India Pvt. Ltd.
FC 23, Block B, 1st Floor, Sector 16A
Film City Noida 201301 U.P.

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click