Re: [gentoo-hardened] Process permission noatsecure

[Chris PeBenito]

On Sun, 2004-02-01 at 18:36, Bill McCarty wrote:
> More generally, is there a document that describes the various access
> vector components? Most components are based on system calls and are
> easily understood.

I've been wanting to do this, but I have so many things going on, I
haven't had a chance to really work on it.  There's some docs from the
NSA, but they're old, and don't have the new API stuff like the
following vectors.

>     setexec:     unknown

override default context for next exec: see setexeccon()

>     setfscreate: permission to create filesystem?

override default context for next file(s) created: see setfscreatecon()

>     noatsecure:  unknown

allowing this means glibc secure mode (sanitized environment) can be
disabled on the transition/exec

>     siginh:      inheritance of signal handler?

allow signal-related state to be inherited on the transition/exec

>     rlimitinh:   inheritance of resource limit?

allow resource limits to be inherited on the transition/exec

>
> I find a few programs that seem to need the noatsecure permission. Because
> the sample policy includes several dontaudits related to this permission,
> I'm having some small difficulties developing appropriate policies for such
> programs.

All of the policy regarding noatsecure, siginh, and rlimitinh are all
from the NSA example policy, and I haven't modified it.  What programs
are you having problems with noatsecure?

-- 
Chris PeBenito
<pebenito@g.o>
Developer,
Hardened Gentoo Linux
Embedded Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243