search for: lsm

Hi, I use shorewall-4.5.4 + lsm-0.143 and it does not seem to work as expected... When all providers are up, everything seems fine. When one goes down, lsm says "link <provider> down event"... and it seems ok but we then experience some problems such as a few unreachable sites, DNS problems... If I remove the...

Hi, I have a multi-isp configuration both on ppp interfaces. As one of them is 32Mbit/s and the other is 8Mbit/s , I have a weight setting of 4 to 1 as in the following providers file entries: vdsl 1 0x10000 - ppp1 - track,balance=4 adsl 2 0x20000 - ppp0 - track,balance=1 I would also like to have fallback between them so that if one is

...> > > On Tue, Mar 14, 2023 at 4:19?AM Roberto Sassu > > > <roberto.sassu at huaweicloud.com> wrote: > > > > From: Roberto Sassu <roberto.sassu at huawei.com> > > > > > > > > Currently, security_inode_init_security() supports only one LSM providing > > > > an xattr and EVM calculating the HMAC on that xattr, plus other inode > > > > metadata. > > > > > > > > Allow all LSMs to provide one or multiple xattrs, by extending the security > > > > blob reservation mechanism. Intro...

..., Mar 14, 2023 at 4:19?AM Roberto Sassu > > > > <roberto.sassu at huaweicloud.com> wrote: > > > > > From: Roberto Sassu <roberto.sassu at huawei.com> > > > > > > > > > > Currently, security_inode_init_security() supports only one LSM providing > > > > > an xattr and EVM calculating the HMAC on that xattr, plus other inode > > > > > metadata. > > > > > > > > > > Allow all LSMs to provide one or multiple xattrs, by extending the security > > > > > blob re...

On Thu, Dec 1, 2022 at 5:42?AM Roberto Sassu <roberto.sassu at huaweicloud.com> wrote: > > From: Roberto Sassu <roberto.sassu at huawei.com> > > One of the major goals of LSM stacking is to run multiple LSMs side by side > without interfering with each other. The ultimate decision will depend on > individual LSM decision. > > Several changes need to be made to the LSM infrastructure to be able to > support that. This patch set tackles one of them: gives t...

From: Roberto Sassu <roberto.sassu at huawei.com> One of the major goals of LSM stacking is to run multiple LSMs side by side without interfering with each other. The ultimate decision will depend on individual LSM decision. Several changes need to be made to the LSM infrastructure to be able to support that. This patch set tackles one of them: gives to each LSM the ability t...

...-0400, Paul Moore wrote: > > On Tue, Mar 14, 2023 at 4:19?AM Roberto Sassu > > <roberto.sassu at huaweicloud.com> wrote: > > > From: Roberto Sassu <roberto.sassu at huawei.com> > > > > > > Currently, security_inode_init_security() supports only one LSM providing > > > an xattr and EVM calculating the HMAC on that xattr, plus other inode > > > metadata. > > > > > > Allow all LSMs to provide one or multiple xattrs, by extending the security > > > blob reservation mechanism. Introduce the new lbs_xattr fi...

From: Roberto Sassu <roberto.sassu at huawei.com> One of the major goals of LSM stacking is to run multiple LSMs side by side without interfering with each other. The ultimate decision will depend on individual LSM decision. Several changes need to be made to the LSM infrastructure to be able to support that. This patch set tackles one of them: gives to each LSM the ability t...

I'm trying to compile R 0.61.3 on Solaris and I get the following error. Does anyone know where I should find these libraries? ld: fatal: library -lSM: not found ld: fatal: library -lICE: not found ld: fatal: File processing errors. No output written to R.binary *** Error code 1 make: Fatal error: Command failed for target `R.binary' Paul Gilbert -.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- r-devel mailin...

G'day, I'm?calculating LSM for the following model, and am finding that R and SAS give different answers. Whilst the error is at the second or third decimal, the percentage error can be quite large. I'm using the effects library (Version: 2.0-10) on R?2.11.1 in the following manner: options(contrasts=c("contr.helm...

Hi, I'm running Samba as a PDC for 1 year it works great. I have one question. In this time we need for some applications Extended Attributes (EA), users can read, write, but not delete files. These applications are written in Pascal (DOS mode) :o((. Can anyone tell me, if RSBAC or LSM or any other similar project can help ne with this problem? Can Samba work with these EA? Thanks, David.

...ves Croissant (http://2006.rmll.info/theme_26?lang=en) but are still open to any submission this year. We expect some talks this year (to be confirmed) about CRAN and Debian. Best regards, Fr?d?ric Lehobey -- for the 2007 team of volunteers of topic 'Science, Research and Medicine' of the LSM.

On Mon, Mar 06, 2023 at 05:58:30PM +0100, Roberto Sassu wrote: > If there is no hook registering to inode_init_security, theoretically > the LSM infrastructure should return -EOPNOTSUPP, which causes ocfs2 to > set si->enable to zero, and not execute the line that causes the kernel > to panic. > > The problem would arise if somehow the LSM infrastructure returns zero, > without setting the xattr. That would explain the pa...

Hi, I''m using Shorewall and LSM to load-balance 3 ISPs. My configuration works, but when an ISP is disabled, LSM is unable to ping from the associated interface. I understand why it happens : when `shorewall disable isp1` is called, Shorewall flushes the routing table isp1, and removes the nexthop in the balance table. So when...

>> Hi, >> sorry I forget to specify OS. >> I'm using: >> RH 7.2 kernel 2.4.9 >> FS - XFS 1.0.2=20 >> Samba 2.2.3a >> I'm using XFS ACL, but I need set EA(ACL) to Change (read - yes, write - >> yes, delete - no, execute - no). >> I don't know how to set this with standard UNIX permissions (rwx).=20 >>

On Thu, 2022-12-01 at 11:41 +0100, Roberto Sassu wrote: > From: Roberto Sassu <roberto.sassu at huawei.com> > > Currently, evm_inode_init_security() processes a single LSM xattr from > the array passed by security_inode_init_security(), and calculates the > HMAC on it and other inode metadata. > > Given that initxattrs() callbacks, called by > security_inode_init_security(), expect that this array is terminated when > the xattr name is set to NULL,...

I have a NFS server with stock 2.4.20 patched with the 5 data=journal patches, plus the 2.4 LSM and NSA's selinux. The partition is mounted with the options: rw,noatime,nosuid,nodev,data=journal,errors=remount-ro The oops seems to happen when the fs is under load. I don't think I encountered this behavior with a non LSM/selinux kernel, so it may have something to do with those, bu...

...ory `/home/mau/sy/R-2.2.0/src/modules/X11' make[1]: Entering directory `/home/mau/sy/R-2.2.0/src/modules/X11' /usr/local/bin/gcc -Wl,-bM:SRE -Wl,-H512 -Wl,-T512 -Wl,-bnoentry -Wl,-bexpall -Wl,-bI:../../../etc/R.exp -L/usr/local/lib -o R_X11.so dataentry.lo devX11.lo rotated.lo rbitmap.lo -lSM -lICE -lX11 -ljpeg -lpng -lz /usr/local/lib/gcc/powerpc-ibm-aix4.3.2.0/3.4.3/../../../../powerpc-ibm-aix4.3.2.0/bin/ld: -static and -shared may not be used together collect2: ld returned 1 exit status make[1]: *** [R_X11.so] Error 1 make[1]: Leaving directory `/home/mau/sy/R-2.2.0/src/modules/X11&...

Hi, I'm using IPSEC in a multi-ISP configuration, lsm 0.131, Kernel 2.6.32, ipsec-tools 0.8.0 This worked fine with Shorewall/Shorewall-Lite 4.5.7. After updating Shorewall to 4.5.8 the routing of ESP packets doesn't work. If I change the Providers.pm file and add connmark => "! --mark 0/$mask" like before in Shorewall 4.5.7 than...

...to the following problem with dynamic linking: make[4]: Entering directory `/home/mau/sy/R-2.2.0/src/modules/X11' /usr/local/bin/gcc -Wl,-bM:SRE -Wl,-H512 -Wl,-T512 -Wl,-bnoentry -Wl,-bexpall -Wl,-bI:../../../etc/R.exp -L/usr/local/lib -o R_X11.so dataentry.lo devX11.lo rotated.lo rbitmap.lo -lSM -lICE -lX11 -ljpeg -lpng -lz /usr/local/lib/gcc/powerpc-ibm-aix4.3.2.0/3.4.3/../../../../powerpc-ibm-aix4.3.2.0/bin/ld: -static and -shared may not be used together collect2: ld returned 1 exit status make[4]: *** [R_X11.so] Error 1 If I add -Wl,-G the same error! If I unset SHLIB_LDFLAGS % $M...