Rule set based access control (rsbac) for linux

Jens Kasten | 2 Feb 2011 09:48

rsbac-admin

Hi list,

i get on git rsbac-admin after make build and than make install this:
Installing RSBAC NSS...
 -------------------------------------
  INTO		 (/usr/local)
  DIR		/usr/local/lib
  INSTALL	libnss_rsbac.la
libtool: install: warning: relinking `libnss_rsbac.la'
libtool: relink: `interface.lo' is not a valid libtool object
libtool: install: error: relink `libnss_rsbac.la' with the above command
before installing it
make[1]: *** [install] Fehler 1
make: *** [nss-install] Fehler 2

Jens

Jens Kasten | 2 Feb 2011 10:35

Re: rsbac-admin

Hmm, strange.
I did as unprivileged user make build and as root user make install and
got the error below.
When i do as root user (make clean) only make install its just install
it.

I use the latest git rsbac-admin and rsbac-kernel.
rsbac_version 
Tools: 1.5.0, Kernel: 1.4.5, Tools-String: 1.5.0

Through this i can't setup anything because: RSBAC_EINVALIDVERSION

Am Mittwoch, den 02.02.2011, 09:48 +0100 schrieb Jens Kasten:
> Hi list,
> 
> i get on git rsbac-admin after make build and than make install this:
> Installing RSBAC NSS...
>  -------------------------------------
>   INTO		 (/usr/local)
>   DIR		/usr/local/lib
>   INSTALL	libnss_rsbac.la
> libtool: install: warning: relinking `libnss_rsbac.la'
> libtool: relink: `interface.lo' is not a valid libtool object
> libtool: install: error: relink `libnss_rsbac.la' with the above command
> before installing it
> make[1]: *** [install] Fehler 1
> make: *** [nss-install] Fehler 2
> 
> Jens 
>

(Continue reading)

Gergely Lónyai | 2 Feb 2011 10:45

Re: rsbac-admin

Hi,

If you're using git-master version rsbac-admin (1.5.0), then you need to
use git-master version kernel...
I suggest for you: replace to a stabil branch rsbac-admin.

Aleph

> -------- Original Message --------
> Subject: Re: [rsbac] rsbac-admin
> From: Jens Kasten <igraltist <at> rsbac.org>
> Date: Wed, February 02, 2011 10:35 am
> To: RSBAC Discussion and Announcements <rsbac <at> rsbac.org>
> 
> 
> Hmm, strange.
> I did as unprivileged user make build and as root user make install and
> got the error below.
> When i do as root user (make clean) only make install its just install
> it.
> 
> I use the latest git rsbac-admin and rsbac-kernel.
> rsbac_version 
> Tools: 1.5.0, Kernel: 1.4.5, Tools-String: 1.5.0
> 
> Through this i can't setup anything because: RSBAC_EINVALIDVERSION
> 
> 
> Am Mittwoch, den 02.02.2011, 09:48 +0100 schrieb Jens Kasten:
> > Hi list,

(Continue reading)

Jens Kasten | 2 Feb 2011 11:20

Re: rsbac-admin

Somehow the rsbac-admin does not work.
I downloaded the
http://download.rsbac.org/code/1.4.5/rsbac-admin-1.4.5.tar.bz2
but it shows with rsbac_version:
Tools: 1.5.0, Kernel: 1.4.5, Tools-String: 1.5.0

I try to find all rsbac files and remove them what the make uninstall
leave out

Am Mittwoch, den 02.02.2011, 02:45 -0700 schrieb Gergely Lónyai:
> Hi,
> 
> If you're using git-master version rsbac-admin (1.5.0), then you need to
> use git-master version kernel...
> I suggest for you: replace to a stabil branch rsbac-admin.
> 
> Aleph
> 
> > -------- Original Message --------
> > Subject: Re: [rsbac] rsbac-admin
> > From: Jens Kasten <igraltist <at> rsbac.org>
> > Date: Wed, February 02, 2011 10:35 am
> > To: RSBAC Discussion and Announcements <rsbac <at> rsbac.org>
> > 
> > 
> > Hmm, strange.
> > I did as unprivileged user make build and as root user make install and
> > got the error below.
> > When i do as root user (make clean) only make install its just install
> > it.

(Continue reading)

Gergely Lónyai | 2 Feb 2011 11:52

Re: rsbac-admin

Indeed.

Aleph

> -------- Original Message --------
> Subject: Re: [rsbac] rsbac-admin
> From: Jens Kasten <igraltist <at> rsbac.org>
> Date: Wed, February 02, 2011 11:20 am
> To: RSBAC Discussion and Announcements <rsbac <at> rsbac.org>
> 
> 
> Somehow the rsbac-admin does not work.
> I downloaded the
> http://download.rsbac.org/code/1.4.5/rsbac-admin-1.4.5.tar.bz2
> but it shows with rsbac_version:
> Tools: 1.5.0, Kernel: 1.4.5, Tools-String: 1.5.0
> 
> I try to find all rsbac files and remove them what the make uninstall
> leave out
> 
> 
> Am Mittwoch, den 02.02.2011, 02:45 -0700 schrieb Gergely Lónyai:
> > Hi,
> > 
> > If you're using git-master version rsbac-admin (1.5.0), then you need to
> > use git-master version kernel...
> > I suggest for you: replace to a stabil branch rsbac-admin.
> > 
> > Aleph
> >

(Continue reading)

Jens Kasten | 2 Feb 2011 12:22

kernel 2.6.37 and tools

Hi list,

the official download for rsbac-admin as tar archive has differnt
version number than named.

In file rbsac-admin-1.4.5/main/header/rsbac/types.h is defined:

/* Last modified: 08/Apr/2010        */

#define RSBAC_VERSION "1.5.0"

Through this it is incompatible with kernel 1.4.5.

My old rsbac-admin on my kvm server has in 
rsbac-admin/main/header/rsbac/types.h:

/* Last modified: 13/Sep/2010        */

#define RSBAC_VERSION "1.4.5"

This work with the latest rsbac-kernel on git.

The kernel 2.6.37 produces a lot off output like  this:

Wed Feb  2 12:12:01 2011 :<4>0000023562|rsbac_get_vfsmount(): unknown
device 00:18
Wed Feb  2 12:12:01 2011 :<4>0000023563|rsbac_auth_clear_f_capset():
invalid device 00:18!
Wed Feb  2 12:12:01 2011 :<4>0000023564|rsbac_auth_clear_f_capset():
invalid device 00:18!

(Continue reading)

Amon Ott | 2 Feb 2011 12:27

Re: kernel 2.6.37 and tools

Hi Jens!

On Wednesday 02 February 2011 wrote Jens Kasten:
> the official download for rsbac-admin as tar archive has differnt
> version number than named.
>
> In file rbsac-admin-1.4.5/main/header/rsbac/types.h is defined:
>
> /* Last modified: 08/Apr/2010        */
>
> #define RSBAC_VERSION "1.5.0"
>
> Through this it is incompatible with kernel 1.4.5.

We will fix that these days, thanks for telling. You can change the version in 
this header by hand, the tools are still compatible. Important for the 
internal version check are these defines:
#define RSBAC_VERSION_MAJOR 1
#define RSBAC_VERSION_MID 4
#define RSBAC_VERSION_MINOR 5

Amon.
--

-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22

Jens Kasten | 3 Feb 2011 19:35

Picon

Re: kernel 2.6.37 and tools

Hi list,

I think I found why I get always this messages below.
I have the follow setup.
The harddisk partition is encrypted with LVM.
For root partition I use the btrfs. For home partition I use the ext4.

I removed all rsbac.dat directories because rsbac_list_recover does not
help.
After boot a rsbac kernel on my root partition I don't have /rsbac.dat
but on /home I have /home/rsbac.dat.

So its looks that rsbac is not working with btrfs.

Grüße 
Jens

Am Mittwoch, den 02.02.2011, 12:22 +0100 schrieb Jens Kasten:
> The kernel 2.6.37 produces a lot off output like  this:
> 
> Wed Feb  2 12:12:01 2011 :<4>0000023562|rsbac_get_vfsmount(): unknown
> device 00:18
> Wed Feb  2 12:12:01 2011 :<4>0000023563|rsbac_auth_clear_f_capset():
> invalid device 00:18!
> Wed Feb  2 12:12:01 2011 :<4>0000023564|rsbac_auth_clear_f_capset():
> invalid device 00:18!
> Wed Feb  2 12:12:01 2011 :<4>0000023565|rsbac_adf_set_attr_auth():
> rsbac_auth_remove_f_capsets() returned error!
> Wed Feb  2 12:12:01 2011 :<6>0000023566|rsbac_adf_set_attr(): request
> TRUNCATE, pid 2138, uid 1000, target_type FILE, tid Device 00:18 Inode

(Continue reading)

Jens Kasten | 18 Feb 2011 14:56

sysfs + udev

Hi list,

i use the kernel 2.6.35.11.
When i boot this, its don't mount the /sys and udev dont work properly.
I mount the /sys and then i can start the xdm but no mouse and keyboard.

Grüße
Jens

_______________________________________________
rsbac mailing list
rsbac <at> rsbac.org
http://www.rsbac.org/mailman/listinfo/rsbac

Jens Kasten | 18 Feb 2011 21:52

Re: sysfs + udev

The config has CONFIG_SYSFS=y set.

The follow branches i have.

hg branches
test-rsbac-pax                 7:29a24fad0896
linux-2.6.35.11-rsbac-pax      6:e1c0be210fb7			
# compiled without rsbac, sys is mountet
linux-2.6.35.11-rsbac          3:f91b36cec8f7 (inactive)
# sys is mounted
linux-2.6.35.11                2:58103022bbca (inactive)
default                        0:6a3047ecf29c (inactive) 

So its looks is rsbac issue.

Am Freitag, den 18.02.2011, 14:56 +0100 schrieb Jens Kasten:
> Hi list,
> 
> i use the kernel 2.6.35.11.
> When i boot this, its don't mount the /sys and udev dont work properly.
> I mount the /sys and then i can start the xdm but no mouse and keyboard.
> 
> Grüße
> Jens
> 
> _______________________________________________
> rsbac mailing list
> rsbac <at> rsbac.org
> http://www.rsbac.org/mailman/listinfo/rsbac

(Continue reading)

Group

gmane.linux.rsbac.

Project Web Page

Rule set based access control (rsbac) for linux

Search Archive

Page

1 | 2

Articles in period: 14

February 2011

Language

Change language

Options

Current view: Threads only / Showing only 20 lines / Not hiding cited text.
Change to All messages, whole messages, or hide cited text.

Post a message
NNTP Newsgroup
Classic Gmane web interface
XML

XML

RSS Feed
List Information

About Gmane

Recent entries

(no subject) (23 May 2013)
linux-3.9.y (22 May 2013)
CVE-2013-2094: Linux privilege escalation (18 May 2013)
A problem when pulling linux-3.8.y (13 May 2013)
PaX options required by clamav (24 Apr 2013)
Invitation to connect on LinkedIn (26 Feb 2013)
git pull has conflicts (10 Feb 2013)
3.1.5 kernel crashes when using CAP policy module (5 Feb 2013)
hi Amon (1 Feb 2013)
X (24 Jan 2013)
Happy New Year! (31 Dec 2012)
Xorg restart (13 Dec 2012)
reset internal list (28 Nov 2012)
rsbac_cap_learn not work (26 Nov 2012)
user audit (25 Nov 2012)
Convert user from PAM to UM not import groups for user (25 Nov 2012)
switch module on boot not working (28 Oct 2012)
UM not working on linux-3.4.y (.9) (29 Sep 2012)
no rsbac directry on linux-3.5.y (29 Sep 2012)
UM local login does not work (19 Aug 2012)
general rc_fd_types numbering schema (19 Aug 2012)

Archives

18	May 2013
6	April 2013
5	March 2013
14	February 2013
2	January 2013
8	December 2012
4	November 2012
10	October 2012
2	September 2012
8	August 2012
18	July 2012
7	June 2012
7	May 2012
17	April 2012
31	March 2012
6	February 2012
3	January 2012
2	December 2011
18	November 2011
6	October 2011
1	September 2011
17	August 2011
11	July 2011
13	June 2011
6	May 2011
1	April 2011
8	March 2011
14	February 2011
10	January 2011
3	December 2010
3	November 2010
2	October 2010
8	August 2010
2	July 2010
3	May 2010
27	April 2010
7	March 2010
8	February 2010
1	January 2010
10	December 2009
6	November 2009
15	October 2009
22	September 2009
15	August 2009
6	June 2009
8	May 2009
14	April 2009
1	March 2009
8	February 2009
70	January 2009
13	December 2008
37	November 2008
12	October 2008
4	September 2008
3	August 2008
11	July 2008
13	June 2008
1	May 2008
5	February 2008
2	January 2008
3	December 2007
12	November 2007
9	October 2007
20	September 2007
13	August 2007
36	July 2007
13	June 2007
34	May 2007
30	April 2007
12	March 2007
8	February 2007
10	January 2007
10	December 2006
11	November 2006
10	October 2006
28	September 2006
44	August 2006
56	July 2006
37	June 2006
8	May 2006
23	April 2006
27	March 2006
21	February 2006
36	January 2006
15	December 2005
15	November 2005
18	October 2005
30	September 2005
25	August 2005
58	July 2005
39	June 2005
37	May 2005
27	April 2005
39	March 2005
58	February 2005
43	January 2005
20	December 2004
21	November 2004
42	October 2004
21	September 2004
48	August 2004
28	July 2004
59	June 2004
46	May 2004
48	April 2004
57	March 2004
28	February 2004
27	January 2004
60	December 2003
36	November 2003
59	October 2003
63	September 2003
23	August 2003

Design

Zawodny | Right Menu | Left Menu

Your Own Design

Paste the URL of your CSS below. Download CSS template