Gentoo Archives: gentoo-hardened

From: Matthias Bethke <matthias@×××××××.de>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Reducing the number of setuids, root user daemons..et al
Date: Wed, 11 Oct 2006 11:14:43
Message-Id: 20061011111248.GF7631@huxley
In Reply to: Re: [gentoo-hardened] Reducing the number of setuids, root user daemons..et al by Miguel Figueiredo Mascarenhas Sousa Filipe
1 Hi Miguel,
2 on Tuesday, 2006-10-10 at 11:35:49, you wrote:
3 > >> One interesting Idea would be to use the /etc/shadow replacement that
4 > >> is present in openwall
5 > >
6 > >Not something I've looked at. Could you describe this a bit more?
7 >
8 > I will, in the meantime, let me just point out to the "homepage" of
9 > the "project":
10 > http://www.openwall.com/tcb/
11
12 Sounds like an interesting concept! But it's already in portage
13 (sys-apps/tcb) so chances are somebody has tried it? I wonder how it
14 integrates with NIS. Guess some changing of the map-updating Makefile
15 should do it.
16
17 cheers!
18 Matthias
19 --
20 I prefer encrypted and signed messages. KeyID: FAC37665
21 Fingerprint: 8C16 3F0A A6FC DF0D 19B0 8DEF 48D9 1700 FAC3 7665

Replies

Subject Author
[gentoo-hardened] Selinux howto for tomcat-apache-mysql Laszlo Kollar <kollarl@×××.hu>
Re: [gentoo-hardened] Reducing the number of setuids, root user daemons..et al Miguel Figueiredo Mascarenhas Sousa Filipe <miguel.filipe@×××××.com>