[ANNOUNCE] UidSEC 0.1

2007-07-14 Thread Roberto De Ioris
t 2.6.22 will follow in the next few days Thanks for testing it -- Roberto De Ioris http://unbit.it JID: [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.

[ANNOUNCE] UidSEC 0.1

2007-07-14 Thread Roberto De Ioris
in the next few days Thanks for testing it -- Roberto De Ioris http://unbit.it JID: [EMAIL PROTECTED] - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read

Re: [PATCH][RFC] security: Convert LSM into a static interface

2007-06-25 Thread Roberto De Ioris
nd yet another delay to deal with. Not > your problem, a little information would be helpful though. I think you will not have too much problem with this patch. After all, you will only need to remove a couple of functions (for the unloading) and take rid of 'old' module parameters (if you use

Re: [PATCH][RFC] security: Convert LSM into a static interface

2007-06-25 Thread Roberto De Ioris
though. I think you will not have too much problem with this patch. After all, you will only need to remove a couple of functions (for the unloading) and take rid of 'old' module parameters (if you use it) -- Roberto De Ioris http://unbit.it JID: [EMAIL PROTECTED] - To unsubscribe from

[ANNOUNCE] UidBind LSM 0.4

2007-05-27 Thread Roberto De Ioris
is available on the website -- Roberto De Ioris http://unbit.it JID: [EMAIL PROTECTED] - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FA

[ANNOUNCE] UidBind LSM 0.4

2007-05-27 Thread Roberto De Ioris
is available on the website -- Roberto De Ioris http://unbit.it JID: [EMAIL PROTECTED] - To unsubscribe from this list: send the line unsubscribe linux-kernel in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http

[ANNOUNCE] UidBind LSM 0.3

2007-04-26 Thread Roberto De Ioris
Hi all, this is the new release of UidBind LSM: http://projects.unbit.it/uidbind/ This new version adds support for gid and a new configfs item named 'all' Unconfigured port will fallback to 'all' item (if available) A patch for vanilla 2.6.21 is available on the website -- Roberto De

[ANNOUNCE] UidBind LSM 0.3

2007-04-26 Thread Roberto De Ioris
Hi all, this is the new release of UidBind LSM: http://projects.unbit.it/uidbind/ This new version adds support for gid and a new configfs item named 'all' Unconfigured port will fallback to 'all' item (if available) A patch for vanilla 2.6.21 is available on the website -- Roberto De

Re: [ANNOUNCE] UidBind LSM 0.2

2007-04-25 Thread Roberto De Ioris
e gid,tcp_gid and udp_gid configfs attributes in the next release. The 'check order' will be: uidbind///_uid uidbind///uid uidbind//_uid uidbind//uid uidbind///_gid uidbind///gid uidbind//_gid uidbind//gid I am investigating the possibility of port-range use, particularly the overlap checks and per

Re: [ANNOUNCE] UidBind LSM 0.2

2007-04-25 Thread Roberto De Ioris
and performance problems. -- Roberto De Ioris http://unbit.it JID: [EMAIL PROTECTED] Wii: 2999 4476 3509 0964 signature.asc Description: Questa รจ una parte del messaggio firmata digitalmente

[ANNOUNCE] UidBind LSM 0.2

2007-04-24 Thread Roberto De Ioris
uidbind/8081/192.168.1.17 mkdir uidbind/8081/192.168.1.26 echo 1017 > uidbind/8081/192.168.1.17/uid echo 1026 > uidbind/8081/192.168.1.26/uid This version even fix some leek in version 0.1 Patch attached is still for vanilla 2.6.20.7 -- Roberto De Ioris http://unbit.it JID: [EMAIL PROTECTED] Wii

Re: [ANNOUNCE] UidBind LSM 0.1

2007-04-24 Thread Roberto De Ioris
Il giorno mar, 24/04/2007 alle 06.51 -0700, Casey Schaufler ha scritto: > --- Roberto De Ioris <[EMAIL PROTECTED]> wrote: > > > Hi all, > > this is a very simple module that allows bind() to tcp/udp port (>=1024) > > only for the uids defined in a configf

Re: [ANNOUNCE] UidBind LSM 0.1

2007-04-24 Thread Roberto De Ioris
Il giorno mar, 24/04/2007 alle 06.51 -0700, Casey Schaufler ha scritto: --- Roberto De Ioris [EMAIL PROTECTED] wrote: Hi all, this is a very simple module that allows bind() to tcp/udp port (=1024) only for the uids defined in a configfs tree. Would you be so kind as to cross post

[ANNOUNCE] UidBind LSM 0.2

2007-04-24 Thread Roberto De Ioris
uidbind/8081/192.168.1.17 mkdir uidbind/8081/192.168.1.26 echo 1017 uidbind/8081/192.168.1.17/uid echo 1026 uidbind/8081/192.168.1.26/uid This version even fix some leek in version 0.1 Patch attached is still for vanilla 2.6.20.7 -- Roberto De Ioris http://unbit.it JID: [EMAIL PROTECTED] Wii: 2999

Re: [ANNOUNCE] UidBind LSM 0.1

2007-04-23 Thread Roberto De Ioris
Il giorno lun, 23/04/2007 alle 14.38 -0400, Gerhard Mack ha scritto: > On Mon, 23 Apr 2007, Roberto De Ioris wrote: > > Hi all, > > this is a very simple module that allows bind() to tcp/udp port (>=1024) > > only for the uids defined in a configfs tree. > > >

[ANNOUNCE] UidBind LSM 0.1

2007-04-23 Thread Roberto De Ioris
ttp://projects.unbit.it/uidbind/ Patch attached is for vanilla 2.6.20.7 -- Roberto De Ioris http://unbit.it JID: [EMAIL PROTECTED] Wii: 2999 4476 3509 0964 diff -Naur linux-2.6.20.7/security/Kconfig linux-2.6.20.7-uidbind/security/Kconfig --- linux-2.6.20.7/security/Kconfig 2007-04-13 22:48:14.0 +0

[ANNOUNCE] UidBind LSM 0.1

2007-04-23 Thread Roberto De Ioris
://projects.unbit.it/uidbind/ Patch attached is for vanilla 2.6.20.7 -- Roberto De Ioris http://unbit.it JID: [EMAIL PROTECTED] Wii: 2999 4476 3509 0964 diff -Naur linux-2.6.20.7/security/Kconfig linux-2.6.20.7-uidbind/security/Kconfig --- linux-2.6.20.7/security/Kconfig 2007-04-13 22:48:14.0 +0200

Re: [ANNOUNCE] UidBind LSM 0.1

2007-04-23 Thread Roberto De Ioris
Il giorno lun, 23/04/2007 alle 14.38 -0400, Gerhard Mack ha scritto: On Mon, 23 Apr 2007, Roberto De Ioris wrote: Hi all, this is a very simple module that allows bind() to tcp/udp port (=1024) only for the uids defined in a configfs tree. It is a first version, it only works