I am experimenting GrSecurity ACL on a Gentoo machine.
The default ACL is quite restrictive. As far as network is concerned,
it allows name resolution through NSCD and the local DNS server;
/bin and /usr/bin are allowed for execution
Here is what I got for Nessus & Nmap -- I don't understand why the
learning mode did not add any connect or bind ACL. Maybe because of
+CAP_NET_RAW and +CAP_NET_BIND_SERVICE
/usr/sbin/nessusd {
/var/lib/nessus/users rw
/var/lib/nessus
/var/lib
/var
/usr/lib/nessus/plugins/.desc rw
/proc/net/route r
/
+CAP_NET_BIND_SERVICE
+CAP_NET_RAW
}
/usr/bin/nmap {
+CAP_NET_RAW
}
_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus
