From aleph at mandriva.org  Tue Aug 10 17:01:24 2010
From: aleph at mandriva.org (Gergely Lonyai)
Date: Tue, 10 Aug 2010 08:01:24 -0700
Subject: [rsbac] rsbac-1.5 planned release date
Message-ID: <20100810080124.9b05b4e5e48d18b6dc565714b379f9f0.7daa352691.wbe@email10.secureserver.net>

Dear Amon,

This is in next six month? I'm planing the rsbac specification to the
next Mandriva release. I use the 1.5 or 1.4.x?

Aleph


From kang at rsbac.org  Fri Aug 20 16:01:25 2010
From: kang at rsbac.org (kang)
Date: Fri, 20 Aug 2010 16:01:25 +0200
Subject: [rsbac] RSBAC 1.4.5 released
Message-ID: <4C6E8AB5.7050903@rsbac.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Rule Set Based Access Control (RSBAC) 1.4.5 has been released for the
Linux kernel 2.6.35+

GIT, HTTP, FTP and APT downloads for the new version are available
from the RSBAC website: http://www.rsbac.org

RSBAC is one of the leading access control systems for the Linux
kernel with a good selection of access control models, see
http://www.rsbac.org/why for more details.

Starting from 1.4.5 onwards, RSBAC  is also available through a smaller,
and faster to decompress LZMA archive (.xz files), as well as providing
SHA256 sum files for verification.

Most important changes since 1.4.4:

    * New release tool in rsbac-misc (rrel)
    * Fixed compilation with newer libtool
    * New rsbac_usershow option to list users with full name
      or with shell
    * More UM tool options work with multiple users given on
      the command line
    * Fixed symlink redirection to return the same sizes with a
      stat() or readlink() calls (this fixes dpkg assertion issues
      on newer versions of dpkg)
    * Fixed FS object hiding in most cases - but this feature
      is still experimental
    * Big DAZ code cleanup
    * Reworked and switched to a own list of slabs for RSBAC's
      memory allocation
    * And of course, many other bug fixes

The complete lists of changes are available here:

Kernel changes:
http://www.rsbac.org/dl.php?file=code/1.4.5/changes-1.4.5.txt

Admin tools changes:
http://www.rsbac.org/dl.php?file=code/1.4.5/admin-changes-1.4.5.txt


Have fun!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxuiq4ACgkQ80VHuunDdyaoIgCgl4gJML8FrpeucoDDKjvO6ZVJ
xMIAn0UGGlFe6asOWfPEx2FD6P0WdQww
=qevz
-----END PGP SIGNATURE-----

From kang at rsbac.org  Fri Aug 20 16:22:25 2010
From: kang at rsbac.org (kang)
Date: Fri, 20 Aug 2010 16:22:25 +0200
Subject: [rsbac] rsbac-1.5 planned release date
In-Reply-To: <20100810080124.9b05b4e5e48d18b6dc565714b379f9f0.7daa352691.wbe@email10.secureserver.net>
References: <20100810080124.9b05b4e5e48d18b6dc565714b379f9f0.7daa352691.wbe@email10.secureserver.net>
Message-ID: <4C6E8FA1.6070701@rsbac.org>

On 08/10/2010 05:01 PM, Gergely Lonyai wrote:
> Dear Amon,
>
> This is in next six month? I'm planing the rsbac specification to the
> next Mandriva release. I use the 1.5 or 1.4.x?
>
> Aleph
>
>   

I'm not Amon, but if you plan on using RSBAC, just go ahead with 1.4.X

We don't have plans to release 1.5.X currently soon. It will happen
"when it's ready", but probably not before 2011.

kang

From aleph at mandriva.org  Sat Aug 21 18:44:48 2010
From: aleph at mandriva.org (Gergely Lonyai)
Date: Sat, 21 Aug 2010 09:44:48 -0700
Subject: [rsbac] rsbac-1.5 planned release date
Message-ID: <20100821094448.9b05b4e5e48d18b6dc565714b379f9f0.c25d5efbda.wbe@email10.secureserver.net>

> -------- Original Message --------
> Subject: Re: [rsbac] rsbac-1.5 planned release date
> From: kang <kang at rsbac.org>
> Date: Fri, August 20, 2010 4:22 pm
> To: RSBAC Discussion and Announcements <rsbac at rsbac.org>
> 
> 
> On 08/10/2010 05:01 PM, Gergely Lonyai wrote:
> > Dear Amon,
> >
> > This is in next six month? I'm planing the rsbac specification to the
> > next Mandriva release. I use the 1.5 or 1.4.x?
> >
> > Aleph
> >
> >   
> 
> I'm not Amon, but if you plan on using RSBAC, just go ahead with 1.4.X
> 
> We don't have plans to release 1.5.X currently soon. It will happen
> "when it's ready", but probably not before 2011.
> 
> kang
> _______________________________________________
> rsbac mailing list
> rsbac at rsbac.org
> http://www.rsbac.org/mailman/listinfo/rsbac

Thank you. It's a precise date.

Aleph


From aleph at mandriva.org  Sat Aug 21 21:38:06 2010
From: aleph at mandriva.org (Gergely Lonyai)
Date: Sat, 21 Aug 2010 12:38:06 -0700
Subject: [rsbac] kernel-2.6.35 patches...
Message-ID: <20100821123806.9b05b4e5e48d18b6dc565714b379f9f0.7766570951.wbe@email10.secureserver.net>

> -------- Original Message --------
> Subject: Re: kernel-2.6.35 patches...
> From: Thomas Backlund <tmb at mandriva.org>
> Date: Sat, August 21, 2010 9:14 pm
> To: Gergely Lonyai <aleph at mandriva.org>
> 
> 
> 21.08.2010 21:45, Gergely Lonyai skrev:
> >> -------- Original Message --------
> >> Subject: kernel-2.6.35 patches...
> >> From: Thomas Backlund<tmb at mandriva.org>
> >> Date: Sat, August 21, 2010 7:53 pm
> >> To: aleph at mandriva.org
> >>
> >>
> >> Hi,
> >>
> >> I see you are moving kernel-rsbac to 2.6.35 series...
> >>
> >> You should pull theese too:
> >>
> >> Fixes broken NFS:
> >> http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/kernel/current/PATCHES/patches/fs-nfs-fix-an-oops-in-the-NFSv4-atomic-open-code.patch
> >> http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/kernel/current/PATCHES/patches/fs-nfs-fix-the-return-value-of-nfs_file_fsync.patch
> >>
> >> Fixes oops/automatic restart due to gcc optimizations (may or may not
> >> trigger on current gcc, but since we are moving to gcc-4.5.x it might
> >> trigger there too...:
> >> http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/kernel/current/PATCHES/patches/x86-asm-Clean-up-and-simplify-set_64bit.patch
> >> http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/kernel/current/PATCHES/patches/x86-asm-Clean-up-and-simplify-asm-cmpxchg.h.patch
> >>
> >>
> >> --
> >> Thomas
> >
> > Thank you. I'm applaying now.
> >
> > Please help a problem. I receive this error message:
> > drivers/infiniband/core/uverbs_main.c: In function 'ib_uverbs_init':
> > drivers/infiniband/core/uverbs_main.c:856: error: 'uverbs_event_mnt'
> > undeclared (first use in this function)
> > drivers/infiniband/core/uverbs_main.c:856: error: (Each undeclared
> > identifier is reported only once
> > drivers/infiniband/core/uverbs_main.c:856: error: for each function it
> > appears in.)
> > make[3]: *** [drivers/infiniband/core/uverbs_main.o] Error 1
> >
> > Does you receive this error, or does it may be by RSBAC patch?
> >
> 
> It's the rsbac patch adding this:
> 
> > --- linux/drivers/infiniband/core/uverbs_main.c	2010-08-13 22:44:56.000000000 +0200
> > +++ work/drivers/infiniband/core/uverbs_main.c	2010-08-21 18:14:47.000000000 +0200
> > @@ -48,6 +48,10 @@
> >
> >  #include <asm/uaccess.h>
> >
> > +#ifdef CONFIG_RSBAC
> > +#include <rsbac/aci.h>
> > +#endif
> > +
> >  #include "uverbs.h"
> >
> >  MODULE_AUTHOR("Roland Dreier");
> > @@ -848,6 +852,9 @@ static int __init ib_uverbs_init(void)
> >  		goto out_class;
> >  	}
> >
> > +#ifdef CONFIG_RSBAC
> > +	rsbac_mount(uverbs_event_mnt);
> > +#endif
> >  	ret = ib_register_client(&uverbs_client);
> >  	if (ret) {
> >  		printk(KERN_ERR "user_verbs: couldn't register client\n");
> 
> 
> but "uverbs_event_mnt" does not exist anymore, so either drop that hunk 
> for now, or disable INFINIBAND in -rsbac kernels until the patch is 
> rewritten to cope with the changes...
> 
> --
> Thomas

I don't have courage to modify the code. I forward it to rsbac's
developers.

Aleph


From gergely at lonyai.com  Sat Aug 21 17:11:09 2010
From: gergely at lonyai.com (Gergely =?UTF-8?Q?L=C3=B3nyai?=)
Date: Sat, 21 Aug 2010 08:11:09 -0700
Subject: [rsbac] rsbac-1.5 planned release date
Message-ID: <20100821081109.9b05b4e5e48d18b6dc565714b379f9f0.2d28f7a4ac.wbe@email10.secureserver.net>

> -------- Original Message --------
> Subject: Re: [rsbac] rsbac-1.5 planned release date
> From: kang <kang at rsbac.org>
> Date: Fri, August 20, 2010 4:22 pm
> To: RSBAC Discussion and Announcements <rsbac at rsbac.org>
> 
> 
> On 08/10/2010 05:01 PM, Gergely Lonyai wrote:
> > Dear Amon,
> >
> > This is in next six month? I'm planing the rsbac specification to the
> > next Mandriva release. I use the 1.5 or 1.4.x?
> >
> > Aleph
> >
> >   
> 
> I'm not Amon, but if you plan on using RSBAC, just go ahead with 1.4.X
> 
> We don't have plans to release 1.5.X currently soon. It will happen
> "when it's ready", but probably not before 2011.
> 
> kang
> _______________________________________________
> rsbac mailing list
> rsbac at rsbac.org
> http://www.rsbac.org/mailman/listinfo/rsbac

Thank you. It's a precise date.

Aleph


From gergely at lonyai.com  Tue Aug 24 11:01:11 2010
From: gergely at lonyai.com (Gergely =?UTF-8?Q?L=C3=B3nyai?=)
Date: Tue, 24 Aug 2010 02:01:11 -0700
Subject: [rsbac] kernel-2.6.35 patches...
Message-ID: <20100824020111.9b05b4e5e48d18b6dc565714b379f9f0.c6668e3af1.wbe@email10.secureserver.net>

> -------- Original Message --------
> Subject: Re: [rsbac] kernel-2.6.35 patches...
> From: "Gergely Lonyai" <aleph at mandriva.org>
> Date: Sat, August 21, 2010 9:38 pm
> To: "Thomas Backlund" <tmb at mandriva.org>
> Cc: rsbac at rsbac.org
> 
> 
> > -------- Original Message --------
> > Subject: Re: kernel-2.6.35 patches...
> > From: Thomas Backlund <tmb at mandriva.org>
> > Date: Sat, August 21, 2010 9:14 pm
> > To: Gergely Lonyai <aleph at mandriva.org>
> > 
> > 
> > 21.08.2010 21:45, Gergely Lonyai skrev:
> > >> -------- Original Message --------
> > >> Subject: kernel-2.6.35 patches...
> > >> From: Thomas Backlund<tmb at mandriva.org>
> > >> Date: Sat, August 21, 2010 7:53 pm
> > >> To: aleph at mandriva.org
> > >>
> > >>
> > >> Hi,
> > >>
> > >> I see you are moving kernel-rsbac to 2.6.35 series...
> > >>
> > >> You should pull theese too:
> > >>
> > >> Fixes broken NFS:
> > >> http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/kernel/current/PATCHES/patches/fs-nfs-fix-an-oops-in-the-NFSv4-atomic-open-code.patch
> > >> http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/kernel/current/PATCHES/patches/fs-nfs-fix-the-return-value-of-nfs_file_fsync.patch
> > >>
> > >> Fixes oops/automatic restart due to gcc optimizations (may or may not
> > >> trigger on current gcc, but since we are moving to gcc-4.5.x it might
> > >> trigger there too...:
> > >> http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/kernel/current/PATCHES/patches/x86-asm-Clean-up-and-simplify-set_64bit.patch
> > >> http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/kernel/current/PATCHES/patches/x86-asm-Clean-up-and-simplify-asm-cmpxchg.h.patch
> > >>
> > >>
> > >> --
> > >> Thomas
> > >
> > > Thank you. I'm applaying now.
> > >
> > > Please help a problem. I receive this error message:
> > > drivers/infiniband/core/uverbs_main.c: In function 'ib_uverbs_init':
> > > drivers/infiniband/core/uverbs_main.c:856: error: 'uverbs_event_mnt'
> > > undeclared (first use in this function)
> > > drivers/infiniband/core/uverbs_main.c:856: error: (Each undeclared
> > > identifier is reported only once
> > > drivers/infiniband/core/uverbs_main.c:856: error: for each function it
> > > appears in.)
> > > make[3]: *** [drivers/infiniband/core/uverbs_main.o] Error 1
> > >
> > > Does you receive this error, or does it may be by RSBAC patch?
> > >
> > 
> > It's the rsbac patch adding this:
> > 
> > > --- linux/drivers/infiniband/core/uverbs_main.c	2010-08-13 22:44:56.000000000 +0200
> > > +++ work/drivers/infiniband/core/uverbs_main.c	2010-08-21 18:14:47.000000000 +0200
> > > @@ -48,6 +48,10 @@
> > >
> > >  #include <asm/uaccess.h>
> > >
> > > +#ifdef CONFIG_RSBAC
> > > +#include <rsbac/aci.h>
> > > +#endif
> > > +
> > >  #include "uverbs.h"
> > >
> > >  MODULE_AUTHOR("Roland Dreier");
> > > @@ -848,6 +852,9 @@ static int __init ib_uverbs_init(void)
> > >  		goto out_class;
> > >  	}
> > >
> > > +#ifdef CONFIG_RSBAC
> > > +	rsbac_mount(uverbs_event_mnt);
> > > +#endif
> > >  	ret = ib_register_client(&uverbs_client);
> > >  	if (ret) {
> > >  		printk(KERN_ERR "user_verbs: couldn't register client\n");
> > 
> > 
> > but "uverbs_event_mnt" does not exist anymore, so either drop that hunk 
> > for now, or disable INFINIBAND in -rsbac kernels until the patch is 
> > rewritten to cope with the changes...
> > 
> > --
> > Thomas
> 
> I don't have courage to modify the code. I forward it to rsbac's
> developers.
> 
> Aleph

This problem have in the 2.6.33 so. What function do I use instead its?


From aleph at mandriva.org  Tue Aug 24 11:09:01 2010
From: aleph at mandriva.org (Gergely Lonyai)
Date: Tue, 24 Aug 2010 02:09:01 -0700
Subject: [rsbac] kernel-2.6.35 patches...
Message-ID: <20100824020901.9b05b4e5e48d18b6dc565714b379f9f0.028ce47c90.wbe@email10.secureserver.net>

> -------- Original Message --------
> Subject: Re: [rsbac] kernel-2.6.35 patches...
> From: "Gergely Lonyai" <aleph at mandriva.org>
> Date: Sat, August 21, 2010 9:38 pm
> To: "Thomas Backlund" <tmb at mandriva.org>
> Cc: rsbac at rsbac.org
> 
> 
> > -------- Original Message --------
> > Subject: Re: kernel-2.6.35 patches...
> > From: Thomas Backlund <tmb at mandriva.org>
> > Date: Sat, August 21, 2010 9:14 pm
> > To: Gergely Lonyai <aleph at mandriva.org>
> > 
> > 
> > 21.08.2010 21:45, Gergely Lonyai skrev:
> > >> -------- Original Message --------
> > >> Subject: kernel-2.6.35 patches...
> > >> From: Thomas Backlund<tmb at mandriva.org>
> > >> Date: Sat, August 21, 2010 7:53 pm
> > >> To: aleph at mandriva.org
> > >>
> > >>
> > >> Hi,
> > >>
> > >> I see you are moving kernel-rsbac to 2.6.35 series...
> > >>
> > >> You should pull theese too:
> > >>
> > >> Fixes broken NFS:
> > >> http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/kernel/current/PATCHES/patches/fs-nfs-fix-an-oops-in-the-NFSv4-atomic-open-code.patch
> > >> http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/kernel/current/PATCHES/patches/fs-nfs-fix-the-return-value-of-nfs_file_fsync.patch
> > >>
> > >> Fixes oops/automatic restart due to gcc optimizations (may or may not
> > >> trigger on current gcc, but since we are moving to gcc-4.5.x it might
> > >> trigger there too...:
> > >> http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/kernel/current/PATCHES/patches/x86-asm-Clean-up-and-simplify-set_64bit.patch
> > >> http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages/cooker/kernel/current/PATCHES/patches/x86-asm-Clean-up-and-simplify-asm-cmpxchg.h.patch
> > >>
> > >>
> > >> --
> > >> Thomas
> > >
> > > Thank you. I'm applaying now.
> > >
> > > Please help a problem. I receive this error message:
> > > drivers/infiniband/core/uverbs_main.c: In function 'ib_uverbs_init':
> > > drivers/infiniband/core/uverbs_main.c:856: error: 'uverbs_event_mnt'
> > > undeclared (first use in this function)
> > > drivers/infiniband/core/uverbs_main.c:856: error: (Each undeclared
> > > identifier is reported only once
> > > drivers/infiniband/core/uverbs_main.c:856: error: for each function it
> > > appears in.)
> > > make[3]: *** [drivers/infiniband/core/uverbs_main.o] Error 1
> > >
> > > Does you receive this error, or does it may be by RSBAC patch?
> > >
> > 
> > It's the rsbac patch adding this:
> > 
> > > --- linux/drivers/infiniband/core/uverbs_main.c	2010-08-13 22:44:56.000000000 +0200
> > > +++ work/drivers/infiniband/core/uverbs_main.c	2010-08-21 18:14:47.000000000 +0200
> > > @@ -48,6 +48,10 @@
> > >
> > >  #include <asm/uaccess.h>
> > >
> > > +#ifdef CONFIG_RSBAC
> > > +#include <rsbac/aci.h>
> > > +#endif
> > > +
> > >  #include "uverbs.h"
> > >
> > >  MODULE_AUTHOR("Roland Dreier");
> > > @@ -848,6 +852,9 @@ static int __init ib_uverbs_init(void)
> > >  		goto out_class;
> > >  	}
> > >
> > > +#ifdef CONFIG_RSBAC
> > > +	rsbac_mount(uverbs_event_mnt);
> > > +#endif
> > >  	ret = ib_register_client(&uverbs_client);
> > >  	if (ret) {
> > >  		printk(KERN_ERR "user_verbs: couldn't register client\n");
> > 
> > 
> > but "uverbs_event_mnt" does not exist anymore, so either drop that hunk 
> > for now, or disable INFINIBAND in -rsbac kernels until the patch is 
> > rewritten to cope with the changes...
> > 
> > --
> > Thomas
> 
> I don't have courage to modify the code. I forward it to rsbac's
> developers.
> 
> Aleph
> 

This problem have in the 2.6.33 so. What function do I use instead its?

Aleph