Gentoo Archives: gentoo-dev

From: Natanael Copa <natanael.copa@×××××.com>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Testing to see if services have crashed on hardened
Date: Fri, 21 Mar 2008 12:39:55
Message-Id: 1206103188.31941.24.camel@nc.nor.wtbts.org
In Reply to: Re: [gentoo-dev] Testing to see if services have crashed on hardened by Roy Marples
1 On Fri, 2008-03-21 at 12:08 +0000, Roy Marples wrote:
2 > On Friday 21 March 2008 10:44:12 Natanael Copa wrote:
3 > > err... run rc-status as root?
4 > >
5 > > I mean if you are not supposed to see if a process is running or not as
6 > > normal user, then hardned is doin it's job when does not allow rc-status
7 > > to show this info to the unprivileged user.
8 > >
9 > > if (!HARDENED || (HARDENED && euid=0) {
10 > > /* show if process is running or not */
11 > > }
12 >
13 > Ideally I'd like a runtime catch rather than a define for this though, but
14 > that's probably the best idea thus far.
15
16 /* pid 1 is most likely owned by root */
17 hardened = pid_is_running(1);
18 if (!hardened || (hardened && euid==0) {
19 ....
20
21 -nc
22
23 >
24 > Thanks
25
26 Thanks for working on openrc.
27
28 > Roy
29
30 --
31 gentoo-dev@l.g.o mailing list

Replies

Subject Author
Re: [gentoo-dev] Testing to see if services have crashed on hardened Roy Marples <roy@×××××××.name>