RSBAC 1.2.6pre5 released

1.2.6pre5 released

RSBAC 1.2.6pre5 has been released for both kernels 2.4.32 and 2.6.16.
This release has possible problems with 2.4 kernels on powerpc. Please
report any trouble
booting on powerpc to michal at rsbac dot org

Changes since pre4:

  * kthread fixes
  * dazuko fixes on SMP
  * Fix FF to allow file READ (but not READ_OPEN) even with execute_only.
  * Compile fix with RC offnotify that shm is destroyed only when it
really is (rtp)

Patches and prepatched kernels are available at this location:

https://rsbac.org/dl.php?file=pre/rsbac-1.2.6pre5/

[PATCH] fix compiling pam support

rsbac-admin's pam support doesn't compile with gcc4 and with
pam-0.99.3.0 (AUTH_* being undeclared).

the following patch fixes it:

_______________________________________________
rsbac mailing list
rsbac <at> rsbac.org
http://www.rsbac.org/mailman/listinfo/rsbac

Re: [PATCH] fix compiling pam support

Hi Thierry!

On Mittwoch 10 Mai 2006 17:57, Thierry Vignaud wrote:
> rsbac-admin's pam support doesn't compile with gcc4 and with
> pam-0.99.3.0 (AUTH_* being undeclared).
> 
> the following patch fixes it:

Thanks for your patch, I have included into our 1.2 repo, so it will 
make it into 1.2.6.

Amon.
--

-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22

rpms for Fedora Core 5

I have posted the first rpms for Fedora Core 5 to 
http://fedora.rsbac.org/. 

Please notice that the kernels do NOT have PaX support, but you must 
use a kernel >= 2.6.15 on FC5 so there is little to do at the moment.

Andrea

--

-- 
Andrea Pasquinucci      andrea <at> rsbac.org       http:/www.rsbac.org/
My public PGP key is at http://www.ucci.it/andrea_rsbac_key.asc
fingerprint = E74B E276 0F75 F894 0DBD  3A04 AE80 B557 6550 270F

_______________________________________________
rsbac mailing list
rsbac <at> rsbac.org
http://www.rsbac.org/mailman/listinfo/rsbac

RSBAC 1.2.6 released

RSBAC 1.2.6  has just been released for both kernels 2.4.32 and 2.6.16.
This is the latest stable version. There is no special upgrade path if
you were using 1.2.5.
Simply compile, install the new admin tools and the new kernel.

This release fixes a number of issues.

Changes since pre5:

  * Fix rsbac_login to only echo Login incorrect on login failures
  * Fix rsbac_login to explicitely set mandatory environment variables
  * Fix compilation issues with pam-0.99.3.0 and gcc-4
  * Fix Dazuko config/modversions.h (#71 => http://bugtracker.rsbac.org)

Patches and prepatched kernels are available at this location:

http://rsbac.org/download#current_version1.2.6

1.2.6 2.6.16.18

Hello, I tried to upgrade a 2.4 kernel (rsbac 1.2.3 ) to 2.6.16.18 / rsbac 
1.2.6 (for 2.6.16.18) and after installing admin tools I get 
RSBAC_EINVALIDVERSION
for every tool like auth_hack_cap etc.

Secondly, I was unable to compile the admin tools package with gcc 3.3 
(debian) etc, finally I had to upgrade to 4.0 gcc under debian. Of course, 
this might be because of some odd versions of the installed packages, but 
there might be problems.

boldizsar

New Live CD and USB Stick for 1.2.6

Hello everyone,

the new Live CD and Live USB Stick for RSBAC 1.2.6 have been uploaded 
to http://livecd.rsbac.org.

They contain a Debian 3.0 Woody with kernel 2.4.32-hf4, PaX, Random 
PID patch and RSBAC v1.2.6. The system is based on Timo’s Rescue CD 
0.9.8.

During boot, some basic RSBAC configuration will be done. After that, 
the softmode will be switched off. Please read the RSBAC 
documentation for more information about RSBAC administration.

The predefined RSBAC administration user is called secoff, both root 
and secoff have no password (just press return). You can also use 
serial console, although the USB stick version still requires one 
return key on a real keyboard.

This CD uses the new RSBAC User Management. It runs with the Clamav 
daemon as on-access scanner. Most daemons live in a JAIL. 

Amon.
--

-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22

_______________________________________________
rsbac mailing list
rsbac <at> rsbac.org

rsbac 1.2.6 admin

So back to the einvalidversion problem,
admin tools 1.2.6 contains:
main/headers/rsbac/reg.h:#define RSBAC_REG_VERSION 2

whereas the rsbac_common package contains VERSION 1 as preset.

boldizsar