BSD secure levels LSM

Kernel

Ráncfelvarrás történt az LKML-en a BSD secure level-eket Linuxon megvalósító LSM-en. A 8 patch-ből álló set olyan emberek ötletein alapul, mint például a grsecurity-s Brad Spengler. A munkát az IBM-es Michael Halcrow végezte.

2005-02-07 [PATCH] BSD Secure Levels: memory alloc failure check

2005-02-07 [PATCH] BSD Secure Levels: remove ptrace, 2.6.11-rc2-

2005-02-07 [PATCH] BSD Secure Levels: comment cleanups, 2.6.11-r

2005-02-07 [PATCH] BSD Secure Levels: nits, 2.6.11-rc2-mm1 (6/8)

2005-02-07 [PATCH] BSD Secure Levels: allow setuid/setgid on pro

2005-02-07 [PATCH] BSD Secure Levels: claim block dev in file st

2005-02-07 [PATCH] BSD Secure Levels: suid/sgid on directories;

2005-02-07 [PATCH] BSD Secure Levels: printk overhaul, 2.6.11-rc

Erdekes, hogy ennek ellenere tippeket ad hozza:

``This is the first in a series of eight patches to the BSD Secure

Levels LSM. It overhauls the printk mechanism in order to reduce the

unnecessary usage of the .text area. Thanks to Brad Spengler for the

suggestion.''

``This is the second in a series of eight patches to the BSD Secure

Levels LSM. It allows setuid and setgid on directories. It also

disallows the creation of setuid/setgid executables via open or mknod.

Thanks to Brad Spengler for the suggestion.''

Mik vannak... :-D