Hello.

I uploaded ccs-tools-1.6.8-20090623.tar.gz .

  ccs-tools-1.6.8-20090623.tar.gz    MD5: 888d774e0afd18cbc5e1bf7641de2818

ccs-tools-1.6.8 is designed for both TOMOYO 1.6.8 and 2.2.0 , but some programs
do not work with TOMOYO 2.2.0 because some features are not supported by
kernel.

TOMOYO 2.2.0 does not have grant_log and reject_log interface and therefore
ccs-auditd does not work with TOMOYO 2.2.0 .
But due to inappropriate error message, I received a bug report
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=532920 .

I modified ccs-auditd to print error message if auditing interface is not
available.

If you are planning to distribute ccs-tools with init script for ccs-auditd ,
I'd suggest to check for auditing interface something like

  [ -r /proc/ccs/grant_log -o -r /sys/kernel/security/tomoyo/grant_log ] || 
exit 0
  [ -r /proc/ccs/reject_log -o -r /sys/kernel/security/tomoyo/reject_log ] || 
exit 0
  echo "Starting TOMOYO auditing daemon"
  /usr/sbin/ccs-auditd /dev/null /var/log/tomoyo/reject_log.txt

before starting ccs-auditd .

Also, please be careful that the configuration directory for TOMOYO 2.2.0 is
/etc/tomoyo/ and you need to run /usr/lib/ccs/tomoyo_init_policy.sh to
initialize /etc/tomoyo/ directory.

Thanks.

_______________________________________________
tomoyo-users-en mailing list
[email protected]
http://lists.sourceforge.jp/mailman/listinfo/tomoyo-users-en

Reply via email to