Gentoo Logo
Gentoo Spaceship

Installation:
Gentoo Handbook
Installation Docs

Documentation:
Home
Listing
About Gentoo
Philosophy
Social Contract

Resources:
Bug Tracker
Developer List
Discussion Forums
Gentoo BitTorrents
Gentoo Linux Enhancement Proposals
IRC Channels
Mailing Lists
Mirrors
Name and Logo Guidelines
Online Package Database
Security Announcements
Staffing Needs
Supporting Vendors
View our CVS

Graphics:
Logos and themes
Icons
ScreenShots

Miscellaneous Resources:
Gentoo Linux Store
Gentoo-hosted projects
IBM dW/Intel article archive




List Archive: gentoo-dev
Navigation:
Lists: gentoo-dev: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-dev@g.o
From: Fabian Groffen <grobian@g.o>
Subject: Re: Testing to see if services have crashed on hardened
Date: Fri, 21 Mar 2008 11:37:11 +0100

 1.1

On 21-03-2008 10:20:45 +0000, Roy Marples wrote:
> Hi List.
> 
> I've just removed the code to check for euid when running services and
> instead relying on permissions of the service state dir and testing
> errno. This is a good thing, but it does have one side effect.
> 
> OpenRC can track daemons by how they were started. So every time you
> run rc-status it tests each reported service to ensure all daemons are
> up.  This also works fine unprivileged on normal boxes - except for
> hardened where users can only see their own processes.

Assuming you would use libkvm, on Darwin this means as unprivileged user
(not using suid) you can't see any processes at all.

> This isn't really an easy answer, as we could have installed OpenRC in a 
> prefix where this wouldn't apply, but we don't know that either.
> 
> Ideas anyone?

Is there a way to just have some fallback method which is less
functional, but just uses some pid file with a lock or something?


-- 
Fabian Groffen
Gentoo on a different level
-- 
gentoo-dev@g.o mailing list


Replies:
Re: Testing to see if services have crashed on hardened
-- Roy Marples
References:
Testing to see if services have crashed on hardened
-- Roy Marples
Navigation:
Lists: gentoo-dev: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Testing to see if services have crashed on hardened
Next by thread:
Re: Testing to see if services have crashed on hardened
Previous by date:
Testing to see if services have crashed on hardened
Next by date:
Re: Testing to see if services have crashed on hardened


May 29, 2008

Donate to support our development efforts.

Gentoo Centric Hosting: vr.org

VR Hosted

Tek Alchemy

Tek Alchemy

SevenL.net

SevenL.net

php|architect

php|architect

Copyright 2001-2007 Gentoo Foundation, Inc. Questions, Comments? Email www@gentoo.org.