Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-dev
Navigation:
Lists: gentoo-dev: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-dev@g.o
From: Natanael Copa <natanael.copa@...>
Subject: Re: Testing to see if services have crashed on hardened
Date: Fri, 21 Mar 2008 11:44:12 +0100
On Fri, 2008-03-21 at 10:20 +0000, Roy Marples wrote:
> Hi List.
> 
> I've just removed the code to check for euid when running services and instead 
> relying on permissions of the service state dir and testing errno. This is a 
> good thing, but it does have one side effect.
> 
> OpenRC can track daemons by how they were started. So every time you run 
> rc-status it tests each reported service to ensure all daemons are up.  This 
> also works fine unprivileged on normal boxes - except for hardened where 
> users can only see their own processes.
> 
> This isn't really an easy answer, as we could have installed OpenRC in a 
> prefix where this wouldn't apply, but we don't know that either.
> 
> Ideas anyone?

err... run rc-status as root?

I mean if you are not supposed to see if a process is running or not as
normal user, then hardned is doin it's job when does not allow rc-status
to show this info to the unprivileged user.

if (!HARDENED || (HARDENED && euid=0) {
	/* show if process is running or not */
}

> Thanks
> 
> Roy

-- 
gentoo-dev@g.o mailing list


Replies:
Re: Testing to see if services have crashed on hardened
-- Roy Marples
References:
Testing to see if services have crashed on hardened
-- Roy Marples
Navigation:
Lists: gentoo-dev: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Re: Testing to see if services have crashed on hardened
Next by thread:
Re: Testing to see if services have crashed on hardened
Previous by date:
Re: Testing to see if services have crashed on hardened
Next by date:
Re: Remaining PMS todo list etc


Updated Jun 17, 2009

Summary: Archive of the gentoo-dev mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.