Re: [gentoo-user-ru] hardened-sources & hardened-gcc

[Maxim Filatov]

Konstantin V. Arkhipov wrote:



>>Еще вопрос - никто не пробовал скрестить Grsecurity и Vserver?
>>
>>
>
>afair, это забросили в середине 2004го. впрочем, могу ошибаться.
>
>
У-у-у-у...

Жаль...



Последний вопрос, понимаю что не в тему рассылки, но правда последний:



пытаюсь обучить gradm:



Выдержка из оффдоки:



Using the learning mode is very simple. All you have to do is add “l” to 

the subject mode of the process, you want to enable learning for. Enable 

the ACL system with gradm –E. Run the application(s) you enabled 

learning mode for several times. This is important, since the learning 

mode uses a threshold–based system to determine when access should be 

given to a file or whether it should be given to a directory. If 4 or 

more similar accesses are made in a single directory (such as writing to 

several files in /tmp), access is granted to that directory instead of 

the individual files. This reduces the amount of rules you have and 

ensures that the application will work correctly after the final ACLs 

are compiled.

Once you feel you’ve given the application the normal usage it would see 

in real life, disable the ACL system with gradm -D (or alternatively, go 

into admin mode with gradm -a), and use This will place the new learned 

ACLs at the end of your ruleset. Simply remove the old ACLs and you’re 

ready to go.



http://www.grsecurity.net/gracldoc.htm#Using_Gradm_and_the_Learning_Mode



Делаю все как написано - добавляю в /etc/grsec/policy:



subject /usr/sbin/metalog lo

/ h

-CAP_ALL





# gradm -E

# /usr/sbin/metalog

# gradm -D

# gradm -L -O /etc/grsec/acl

# cat /etc/grsec/acl

а там пусто...



???



Заранее спасибо!

-- 

gentoo-user-ru@g.o mailing list