From igraltist at rsbac.org Wed Feb 2 09:48:30 2011 From: igraltist at rsbac.org (Jens Kasten) Date: Wed, 02 Feb 2011 09:48:30 +0100 Subject: [rsbac] rsbac-admin Message-ID: <1296636510.4079.2.camel@jaschtschik-malo> Hi list, i get on git rsbac-admin after make build and than make install this: Installing RSBAC NSS... ------------------------------------- INTO (/usr/local) DIR /usr/local/lib INSTALL libnss_rsbac.la libtool: install: warning: relinking `libnss_rsbac.la' libtool: relink: `interface.lo' is not a valid libtool object libtool: install: error: relink `libnss_rsbac.la' with the above command before installing it make[1]: *** [install] Fehler 1 make: *** [nss-install] Fehler 2 Jens From igraltist at rsbac.org Wed Feb 2 10:35:09 2011 From: igraltist at rsbac.org (Jens Kasten) Date: Wed, 02 Feb 2011 10:35:09 +0100 Subject: [rsbac] rsbac-admin In-Reply-To: <1296636510.4079.2.camel@jaschtschik-malo> References: <1296636510.4079.2.camel@jaschtschik-malo> Message-ID: <1296639309.4211.5.camel@jaschtschik-malo> Hmm, strange. I did as unprivileged user make build and as root user make install and got the error below. When i do as root user (make clean) only make install its just install it. I use the latest git rsbac-admin and rsbac-kernel. rsbac_version Tools: 1.5.0, Kernel: 1.4.5, Tools-String: 1.5.0 Through this i can't setup anything because: RSBAC_EINVALIDVERSION Am Mittwoch, den 02.02.2011, 09:48 +0100 schrieb Jens Kasten: > Hi list, > > i get on git rsbac-admin after make build and than make install this: > Installing RSBAC NSS... > ------------------------------------- > INTO (/usr/local) > DIR /usr/local/lib > INSTALL libnss_rsbac.la > libtool: install: warning: relinking `libnss_rsbac.la' > libtool: relink: `interface.lo' is not a valid libtool object > libtool: install: error: relink `libnss_rsbac.la' with the above command > before installing it > make[1]: *** [install] Fehler 1 > make: *** [nss-install] Fehler 2 > > Jens > > _______________________________________________ > rsbac mailing list > rsbac at rsbac.org > http://www.rsbac.org/mailman/listinfo/rsbac From aleph at mandriva.org Wed Feb 2 10:45:45 2011 From: aleph at mandriva.org (Gergely =?UTF-8?Q?L=C3=B3nyai?=) Date: Wed, 02 Feb 2011 02:45:45 -0700 Subject: [rsbac] rsbac-admin Message-ID: <20110202024545.9b05b4e5e48d18b6dc565714b379f9f0.cfaf9e2cd1.wbe@email10.secureserver.net> Hi, If you're using git-master version rsbac-admin (1.5.0), then you need to use git-master version kernel... I suggest for you: replace to a stabil branch rsbac-admin. Aleph > -------- Original Message -------- > Subject: Re: [rsbac] rsbac-admin > From: Jens Kasten > Date: Wed, February 02, 2011 10:35 am > To: RSBAC Discussion and Announcements > > > Hmm, strange. > I did as unprivileged user make build and as root user make install and > got the error below. > When i do as root user (make clean) only make install its just install > it. > > I use the latest git rsbac-admin and rsbac-kernel. > rsbac_version > Tools: 1.5.0, Kernel: 1.4.5, Tools-String: 1.5.0 > > Through this i can't setup anything because: RSBAC_EINVALIDVERSION > > > Am Mittwoch, den 02.02.2011, 09:48 +0100 schrieb Jens Kasten: > > Hi list, > > > > i get on git rsbac-admin after make build and than make install this: > > Installing RSBAC NSS... > > ------------------------------------- > > INTO (/usr/local) > > DIR /usr/local/lib > > INSTALL libnss_rsbac.la > > libtool: install: warning: relinking `libnss_rsbac.la' > > libtool: relink: `interface.lo' is not a valid libtool object > > libtool: install: error: relink `libnss_rsbac.la' with the above command > > before installing it > > make[1]: *** [install] Fehler 1 > > make: *** [nss-install] Fehler 2 > > > > Jens > > > > _______________________________________________ > > rsbac mailing list > > rsbac at rsbac.org > > http://www.rsbac.org/mailman/listinfo/rsbac > > > _______________________________________________ > rsbac mailing list > rsbac at rsbac.org > http://www.rsbac.org/mailman/listinfo/rsbac From igraltist at rsbac.org Wed Feb 2 11:20:16 2011 From: igraltist at rsbac.org (Jens Kasten) Date: Wed, 02 Feb 2011 11:20:16 +0100 Subject: [rsbac] rsbac-admin In-Reply-To: <20110202024545.9b05b4e5e48d18b6dc565714b379f9f0.cfaf9e2cd1.wbe@email10.secureserver.net> References: <20110202024545.9b05b4e5e48d18b6dc565714b379f9f0.cfaf9e2cd1.wbe@email10.secureserver.net> Message-ID: <1296642016.5680.2.camel@jaschtschik-malo> Somehow the rsbac-admin does not work. I downloaded the http://download.rsbac.org/code/1.4.5/rsbac-admin-1.4.5.tar.bz2 but it shows with rsbac_version: Tools: 1.5.0, Kernel: 1.4.5, Tools-String: 1.5.0 I try to find all rsbac files and remove them what the make uninstall leave out Am Mittwoch, den 02.02.2011, 02:45 -0700 schrieb Gergely L?nyai: > Hi, > > If you're using git-master version rsbac-admin (1.5.0), then you need to > use git-master version kernel... > I suggest for you: replace to a stabil branch rsbac-admin. > > Aleph > > > -------- Original Message -------- > > Subject: Re: [rsbac] rsbac-admin > > From: Jens Kasten > > Date: Wed, February 02, 2011 10:35 am > > To: RSBAC Discussion and Announcements > > > > > > Hmm, strange. > > I did as unprivileged user make build and as root user make install and > > got the error below. > > When i do as root user (make clean) only make install its just install > > it. > > > > I use the latest git rsbac-admin and rsbac-kernel. > > rsbac_version > > Tools: 1.5.0, Kernel: 1.4.5, Tools-String: 1.5.0 > > > > Through this i can't setup anything because: RSBAC_EINVALIDVERSION > > > > > > Am Mittwoch, den 02.02.2011, 09:48 +0100 schrieb Jens Kasten: > > > Hi list, > > > > > > i get on git rsbac-admin after make build and than make install this: > > > Installing RSBAC NSS... > > > ------------------------------------- > > > INTO (/usr/local) > > > DIR /usr/local/lib > > > INSTALL libnss_rsbac.la > > > libtool: install: warning: relinking `libnss_rsbac.la' > > > libtool: relink: `interface.lo' is not a valid libtool object > > > libtool: install: error: relink `libnss_rsbac.la' with the above command > > > before installing it > > > make[1]: *** [install] Fehler 1 > > > make: *** [nss-install] Fehler 2 > > > > > > Jens > > > > > > _______________________________________________ > > > rsbac mailing list > > > rsbac at rsbac.org > > > http://www.rsbac.org/mailman/listinfo/rsbac > > > > > > _______________________________________________ > > rsbac mailing list > > rsbac at rsbac.org > > http://www.rsbac.org/mailman/listinfo/rsbac > > _______________________________________________ > rsbac mailing list > rsbac at rsbac.org > http://www.rsbac.org/mailman/listinfo/rsbac From gergely at lonyai.com Wed Feb 2 11:52:55 2011 From: gergely at lonyai.com (Gergely =?UTF-8?Q?L=C3=B3nyai?=) Date: Wed, 02 Feb 2011 03:52:55 -0700 Subject: [rsbac] rsbac-admin Message-ID: <20110202035255.9b05b4e5e48d18b6dc565714b379f9f0.f8088d59e6.wbe@email10.secureserver.net> Indeed. Aleph > -------- Original Message -------- > Subject: Re: [rsbac] rsbac-admin > From: Jens Kasten > Date: Wed, February 02, 2011 11:20 am > To: RSBAC Discussion and Announcements > > > Somehow the rsbac-admin does not work. > I downloaded the > http://download.rsbac.org/code/1.4.5/rsbac-admin-1.4.5.tar.bz2 > but it shows with rsbac_version: > Tools: 1.5.0, Kernel: 1.4.5, Tools-String: 1.5.0 > > I try to find all rsbac files and remove them what the make uninstall > leave out > > > Am Mittwoch, den 02.02.2011, 02:45 -0700 schrieb Gergely L?nyai: > > Hi, > > > > If you're using git-master version rsbac-admin (1.5.0), then you need to > > use git-master version kernel... > > I suggest for you: replace to a stabil branch rsbac-admin. > > > > Aleph > > > > > -------- Original Message -------- > > > Subject: Re: [rsbac] rsbac-admin > > > From: Jens Kasten > > > Date: Wed, February 02, 2011 10:35 am > > > To: RSBAC Discussion and Announcements > > > > > > > > > Hmm, strange. > > > I did as unprivileged user make build and as root user make install and > > > got the error below. > > > When i do as root user (make clean) only make install its just install > > > it. > > > > > > I use the latest git rsbac-admin and rsbac-kernel. > > > rsbac_version > > > Tools: 1.5.0, Kernel: 1.4.5, Tools-String: 1.5.0 > > > > > > Through this i can't setup anything because: RSBAC_EINVALIDVERSION > > > > > > > > > Am Mittwoch, den 02.02.2011, 09:48 +0100 schrieb Jens Kasten: > > > > Hi list, > > > > > > > > i get on git rsbac-admin after make build and than make install this: > > > > Installing RSBAC NSS... > > > > ------------------------------------- > > > > INTO (/usr/local) > > > > DIR /usr/local/lib > > > > INSTALL libnss_rsbac.la > > > > libtool: install: warning: relinking `libnss_rsbac.la' > > > > libtool: relink: `interface.lo' is not a valid libtool object > > > > libtool: install: error: relink `libnss_rsbac.la' with the above command > > > > before installing it > > > > make[1]: *** [install] Fehler 1 > > > > make: *** [nss-install] Fehler 2 > > > > > > > > Jens > > > > > > > > _______________________________________________ > > > > rsbac mailing list > > > > rsbac at rsbac.org > > > > http://www.rsbac.org/mailman/listinfo/rsbac > > > > > > > > > _______________________________________________ > > > rsbac mailing list > > > rsbac at rsbac.org > > > http://www.rsbac.org/mailman/listinfo/rsbac > > > > _______________________________________________ > > rsbac mailing list > > rsbac at rsbac.org > > http://www.rsbac.org/mailman/listinfo/rsbac > > > _______________________________________________ > rsbac mailing list > rsbac at rsbac.org > http://www.rsbac.org/mailman/listinfo/rsbac From igraltist at rsbac.org Wed Feb 2 12:22:39 2011 From: igraltist at rsbac.org (Jens Kasten) Date: Wed, 02 Feb 2011 12:22:39 +0100 Subject: [rsbac] kernel 2.6.37 and tools Message-ID: <1296645759.2315.1.camel@jaschtschik-malo> Hi list, the official download for rsbac-admin as tar archive has differnt version number than named. In file rbsac-admin-1.4.5/main/header/rsbac/types.h is defined: /* Last modified: 08/Apr/2010 */ #define RSBAC_VERSION "1.5.0" Through this it is incompatible with kernel 1.4.5. My old rsbac-admin on my kvm server has in rsbac-admin/main/header/rsbac/types.h: /* Last modified: 13/Sep/2010 */ #define RSBAC_VERSION "1.4.5" This work with the latest rsbac-kernel on git. The kernel 2.6.37 produces a lot off output like this: Wed Feb 2 12:12:01 2011 :<4>0000023562|rsbac_get_vfsmount(): unknown device 00:18 Wed Feb 2 12:12:01 2011 :<4>0000023563|rsbac_auth_clear_f_capset(): invalid device 00:18! Wed Feb 2 12:12:01 2011 :<4>0000023564|rsbac_auth_clear_f_capset(): invalid device 00:18! Wed Feb 2 12:12:01 2011 :<4>0000023565|rsbac_adf_set_attr_auth(): rsbac_auth_remove_f_capsets() returned error! Wed Feb 2 12:12:01 2011 :<6>0000023566|rsbac_adf_set_attr(): request TRUNCATE, pid 2138, uid 1000, target_type FILE, tid Device 00:18 Inode 10925 Path /vteCQU2PV, new_target_type NONE, new_tid NONE, attr none, value 0, error -1004 Wed Feb 2 12:12:01 2011 :<4>0000023567|do_truncate() [open_namei(), do_sys_truncate() [sys_truncate()]]: rsbac_adf_set_attr() returned error Wed Feb 2 12:17:44 2011 :<6>0000086289|rsbac_adf_set_attr(): request DELETE, pid 1501, uid 0, target_type FILE, tid Device 00:18 Inode 4542 Path /.X0-lock, new_target_type NONE, new_tid NONE, attr nlink, value 1, error -1004 Wed Feb 2 12:17:44 2011 :<4>0000086290|vfs_unlink() [do_unlink() [sys_unlink()]]: rsbac_adf_set_attr() returned error From ao at rsbac.org Wed Feb 2 12:27:00 2011 From: ao at rsbac.org (Amon Ott) Date: Wed, 2 Feb 2011 12:27:00 +0100 Subject: [rsbac] kernel 2.6.37 and tools In-Reply-To: <1296645759.2315.1.camel@jaschtschik-malo> References: <1296645759.2315.1.camel@jaschtschik-malo> Message-ID: <201102021227.00751.ao@rsbac.org> Hi Jens! On Wednesday 02 February 2011 wrote Jens Kasten: > the official download for rsbac-admin as tar archive has differnt > version number than named. > > In file rbsac-admin-1.4.5/main/header/rsbac/types.h is defined: > > /* Last modified: 08/Apr/2010 */ > > #define RSBAC_VERSION "1.5.0" > > Through this it is incompatible with kernel 1.4.5. We will fix that these days, thanks for telling. You can change the version in this header by hand, the tools are still compatible. Important for the internal version check are these defines: #define RSBAC_VERSION_MAJOR 1 #define RSBAC_VERSION_MID 4 #define RSBAC_VERSION_MINOR 5 Amon. -- http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22 From jens at kasten-edv.de Thu Feb 3 19:35:11 2011 From: jens at kasten-edv.de (Jens Kasten) Date: Thu, 03 Feb 2011 19:35:11 +0100 Subject: [rsbac] kernel 2.6.37 and tools In-Reply-To: <1296645759.2315.1.camel@jaschtschik-malo> References: <1296645759.2315.1.camel@jaschtschik-malo> Message-ID: <1296758111.2633.11.camel@jaschtschik-malo> Hi list, I think I found why I get always this messages below. I have the follow setup. The harddisk partition is encrypted with LVM. For root partition I use the btrfs. For home partition I use the ext4. I removed all rsbac.dat directories because rsbac_list_recover does not help. After boot a rsbac kernel on my root partition I don't have /rsbac.dat but on /home I have /home/rsbac.dat. So its looks that rsbac is not working with btrfs. Gr??e Jens Am Mittwoch, den 02.02.2011, 12:22 +0100 schrieb Jens Kasten: > The kernel 2.6.37 produces a lot off output like this: > > Wed Feb 2 12:12:01 2011 :<4>0000023562|rsbac_get_vfsmount(): unknown > device 00:18 > Wed Feb 2 12:12:01 2011 :<4>0000023563|rsbac_auth_clear_f_capset(): > invalid device 00:18! > Wed Feb 2 12:12:01 2011 :<4>0000023564|rsbac_auth_clear_f_capset(): > invalid device 00:18! > Wed Feb 2 12:12:01 2011 :<4>0000023565|rsbac_adf_set_attr_auth(): > rsbac_auth_remove_f_capsets() returned error! > Wed Feb 2 12:12:01 2011 :<6>0000023566|rsbac_adf_set_attr(): request > TRUNCATE, pid 2138, uid 1000, target_type FILE, tid Device 00:18 Inode > 10925 Path /vteCQU2PV, new_target_type NONE, new_tid NONE, attr none, > value 0, error -1004 > Wed Feb 2 12:12:01 2011 :<4>0000023567|do_truncate() [open_namei(), > do_sys_truncate() [sys_truncate()]]: rsbac_adf_set_attr() returned error > > Wed Feb 2 12:17:44 2011 :<6>0000086289|rsbac_adf_set_attr(): request > DELETE, pid 1501, uid 0, target_type FILE, tid Device 00:18 Inode 4542 > Path /.X0-lock, new_target_type NONE, new_tid NONE, attr nlink, value 1, > error -1004 > Wed Feb 2 12:17:44 2011 :<4>0000086290|vfs_unlink() [do_unlink() > [sys_unlink()]]: rsbac_adf_set_attr() returned error > > > > > _______________________________________________ > rsbac mailing list > rsbac at rsbac.org > http://www.rsbac.org/mailman/listinfo/rsbac From igraltist at rsbac.org Fri Feb 18 14:56:22 2011 From: igraltist at rsbac.org (Jens Kasten) Date: Fri, 18 Feb 2011 14:56:22 +0100 Subject: [rsbac] sysfs + udev Message-ID: <1298037382.15648.2.camel@jaschtschik-malo> Hi list, i use the kernel 2.6.35.11. When i boot this, its don't mount the /sys and udev dont work properly. I mount the /sys and then i can start the xdm but no mouse and keyboard. Gr??e Jens From igraltist at rsbac.org Fri Feb 18 21:52:26 2011 From: igraltist at rsbac.org (Jens Kasten) Date: Fri, 18 Feb 2011 21:52:26 +0100 Subject: [rsbac] sysfs + udev In-Reply-To: <1298037382.15648.2.camel@jaschtschik-malo> References: <1298037382.15648.2.camel@jaschtschik-malo> Message-ID: <1298062346.3894.2.camel@jaschtschik-pc> The config has CONFIG_SYSFS=y set. The follow branches i have. hg branches test-rsbac-pax 7:29a24fad0896 linux-2.6.35.11-rsbac-pax 6:e1c0be210fb7 # compiled without rsbac, sys is mountet linux-2.6.35.11-rsbac 3:f91b36cec8f7 (inactive) # sys is mounted linux-2.6.35.11 2:58103022bbca (inactive) default 0:6a3047ecf29c (inactive) So its looks is rsbac issue. Am Freitag, den 18.02.2011, 14:56 +0100 schrieb Jens Kasten: > Hi list, > > i use the kernel 2.6.35.11. > When i boot this, its don't mount the /sys and udev dont work properly. > I mount the /sys and then i can start the xdm but no mouse and keyboard. > > Gr??e > Jens > > _______________________________________________ > rsbac mailing list > rsbac at rsbac.org > http://www.rsbac.org/mailman/listinfo/rsbac From zeinab.shahbazi.860024695 at gmail.com Mon Feb 28 14:24:39 2011 From: zeinab.shahbazi.860024695 at gmail.com (zeinab shahbazi) Date: Mon, 28 Feb 2011 16:54:39 +0330 Subject: [rsbac] rsbac and btrfs In-Reply-To: References: Message-ID: Hello Sir, I like to understand that "What is the rsbac patch changeing that work with btrfs? ". Its looks that rsbac is not working with btrfs, Is it true? Can you help me?, If I want rsbac work with btrfs. Thanks a lot. From tazok.id0 at gmail.com Mon Feb 28 16:47:36 2011 From: tazok.id0 at gmail.com (=?ISO-8859-1?Q?Javier_Juan_Mart=EDnez_Cabez=F3n?=) Date: Mon, 28 Feb 2011 16:47:36 +0100 Subject: [rsbac] rsbac and btrfs In-Reply-To: References: Message-ID: AFAIK it works with vfs, a common layer of all filesystems in linux. 2011/2/28 zeinab shahbazi > Hello Sir, > I like to understand that "What is the rsbac patch changeing that > work with btrfs? ". > Its looks that rsbac is not working with btrfs, Is it true? > Can you help me?, If I want rsbac work with btrfs. > Thanks a lot. > _______________________________________________ > rsbac mailing list > rsbac at rsbac.org > http://www.rsbac.org/mailman/listinfo/rsbac > From tazok.id0 at gmail.com Mon Feb 28 17:00:38 2011 From: tazok.id0 at gmail.com (=?ISO-8859-1?Q?Javier_Juan_Mart=EDnez_Cabez=F3n?=) Date: Mon, 28 Feb 2011 17:00:38 +0100 Subject: [rsbac] rsbac and btrfs In-Reply-To: References: Message-ID: PD: If btrfs is based on vfs as any other filesystem does, it should work, maybe the problem if anyone could be in some code that shall go in the fs overlay dependent code (?if I remember correctly maybe secure delete ones?). I think you should send more info about your problem and in particular the messages sent in the terms of why you know that your rsbac is not working with brtfs, logs and thing like these. El 28 de febrero de 2011 16:47, Javier Juan Mart?nez Cabez?n < tazok.id0 at gmail.com> escribi?: > AFAIK it works with vfs, a common layer of all filesystems in linux. > > > 2011/2/28 zeinab shahbazi > > Hello Sir, >> I like to understand that "What is the rsbac patch changeing that >> work with btrfs? ". >> Its looks that rsbac is not working with btrfs, Is it true? >> Can you help me?, If I want rsbac work with btrfs. >> Thanks a lot. >> _______________________________________________ >> rsbac mailing list >> rsbac at rsbac.org >> http://www.rsbac.org/mailman/listinfo/rsbac >> > > From tazok.id0 at gmail.com Mon Feb 28 17:57:35 2011 From: tazok.id0 at gmail.com (=?ISO-8859-1?Q?Javier_Juan_Mart=EDnez_Cabez=F3n?=) Date: Mon, 28 Feb 2011 17:57:35 +0100 Subject: [rsbac] rsbac and btrfs In-Reply-To: References: Message-ID: I don't see any rsbac code in (no vfs, so filesystem dependent) brtfs so try to disable SECURE_DELETE and retry, If it does not work with the information I have I can't imagine what's up in your system (and I can't imagine rsbac developers doing voodoo magic with the BOFH's number so if you think that this is your system's problem I tell you that you are wrong ;) ) 2011/2/28 zeinab shahbazi > Hello Sir, > I like to understand that "What is the rsbac patch changeing that > work with btrfs? ". > Its looks that rsbac is not working with btrfs, Is it true? > Can you help me?, If I want rsbac work with btrfs. > Thanks a lot. > _______________________________________________ > rsbac mailing list > rsbac at rsbac.org > http://www.rsbac.org/mailman/listinfo/rsbac >