search for: mls

FreeBSD 5.1-RELEASE Hi, I'm examining Biba and MLS MAC policies and something is not clear for me. Unless I'm doing something wrong, it seems policies are enforced only for reading, but not writing. 1) Biba I've created test file with biba/127 label: $ echo "Message" > file_biba_127.txt $ setfmac biba/127 file_biba_127.txt...

...ping 192.168.65.100 PING 192.168.65.100 (192.168.65.100): 56 data bytes ping: sendto: Permission denied ping: sendto: Permission denied ping: sendto: Permission denied ^C --- 192.168.65.100 ping statistics --- 3 packets transmitted, 0 packets received, 100% packet loss On the other side, when mac_mls is loaded, networking works, but starting X server fails with message "Couldn't mmap /dev/vga" (I don't see /dev/vga device regardless of MAC policy loaded) Is it normal, or is something wrong ? Is any additional documentation about MAC available, more than papers at http://www....

...y, and below is is the sestatus: SELinux status: enabled SELinuxfs mount: /sys/fs/selinux SELinux root directory: /etc/selinux Loaded policy name: default Current mode: permissive Mode from config file: permissive Policy MLS status: enabled Policy deny_unknown status: allowed Max kernel policy version: 28 this is custom kernel 3.10 with debian testing a.k.a. jessie. also, my friend with the same configuration on rpi, except for his newer kernel, is having same stranginess. ivan

...powerusers are archiving mail automatically with autocreated folders based on year + month. Is there any good way to make that with sieve... One example require "fileinto"; if address :is ["From", "To"] "dovecot at dovecot.org" { fileinto "INBOX.mls.%Y.%m.dovecot"; } This will fill any mails into INBOX.mls.2012.03.dovecot uppon receiving... I don't know if some sieve guru can tell me how to do that... ? Kind regards, Xavier

Does anyone know of a good resource on doing MLS (Multiple Listing Service) integration with Rails? My searches don''t seem to be turning up much information and I need to get a quick handle on what''s involved in this process. Many thanks!

...recipe: set the label for /sbin/dhclient to lomac/high[low]. This gets the job done, but there were a few problems: first of all, this label does not seem to persist after a reboot - I have not yet found a reasonable explanation for this. However, that would not be an issue, as it seems a LOMAC/MLS setup would need a script at boot time to update the labels anyway - the /dev filesystem needs them too. When running a script to set the labels from /etc/rc.d I ran into the following problem. Here's the relevant part of the script: check_startmsgs && echo -n "Setting MAC po...

Updating a system from CentOS 5.4 (current) to 5.5, and I see: libsepol.scope_copy_callback: zosremote: Duplicate declaration in module: type/attribute zos_remote_t libsemanage.semanage_link_sandbox: Link packages failed semodule: Failed! Any ideas as to what's going on, or why? mark "glad selinux is disabled on that box"

...statements because >i am writing to a file >where the characters strings are the column names of a dataframe >and the numbers are the elements in a particular row. >So, a file might look like > >AAA 2.1 >BB 3.1 >AHLZ 0.2 > >and it would be named "rowname".mls. > >so, each time i get to a new row, i create a new file and write to it. > >the code is below and it works fine. my only question is >there a way to tell the write statement that i want the data >to be written in a fixed format ( same number of spaces >betweewn character stri...

...erver with IPSEC and MAC support, the server innevitably crack. Because the m_pkthdr of some mbuf is mangled by unknown reasons. Following is my kernel configuration: options MAC options MAC_DEBUG options UFS_EXTATTR options UFS_EXTATTR_AUTOSTART options MAC_MLS # uncomment to put sebsd to kernel, but better to options IPSEC options IPSEC_ESP options IPSEC_DEBUG Following is the kernel dump backtrace: #0 0xc0668f0b in kdb_enter (msg=0x12 <Address 0x12 out of bounds>) at cpufunc.h:60 #1 0xc06509ab in panic (fmt=0xc08e6470...

These patches update the example FLASK policy shipped with Xen and enable its build if the required tools are present. The third patch requires rerunning autoconf to update tools/configure. [PATCH 1/3] flask/policy: sort dom0 accesses [PATCH 2/3] flask/policy: rework policy build system [PATCH 3/3] tools/flask: add FLASK policy to build

I used the latest version from here: http://www.mls-software.com/opensshd.html On my other (Windows 10) machine (on which openssh works), I have cygwin installed, but if ssh was using cygwin, I wasn't aware of it. I just ran ssh from the command prompt. Wallace Forman 913-669-4453 On Wed, Jun 29, 2016 at 4:37 PM, ?ngel Gonz?lez <keisial at...

...CentOS 7 on an Internet-facing server. Installing BIND gives me this: Running transaction Installing : python-ply-3.4-11.el7.noarch 1/2 Installing : 32:bind-9.11.4-9.P2.el7.x86_64 2/2 /var/tmp/rpm-tmp.M6XABV: line 59: /etc/selinux/mls/rpmbooleans.custom: No such file or directory grep: /etc/selinux/mls/rpmbooleans.custom: No such file or directory /var/tmp/rpm-tmp.M6XABV: line 72: /etc/selinux/mls/rpmbooleans.custom: No such file or directory ValueError: SELinux policy is not managed or store cannot be accessed. Verifying : p...

:( I am trying to get Internet Explorer to run because that is the only program I can use to log into MLS (Realtor's Website) I get the website to come up but it keeps saying I need to change the Privacy settings and enable cookies. When I go to do that, I click on the Privacy Tab and there is nothing there! It also locks up after that and I have to do a restart. Any help would be greatly appre...

...e values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - No SELinux policy is loaded. SELINUX=enforcing # SELINUXTYPE= can take one of these two values: # targeted - Targeted processes are protected, # mls - Multi Level Security protection. SELINUXTYPE=targeted And when I check if it's enabled this is what I get: [root at beta-new:~] #getenforce Disabled But when I go to set SELinux to enabled, even with the config file set as you see it above, I get this result: [root at beta-new:~] #setenf...

...tart any workaround for this? g Regards Greg Cirino ___________________________________ Cirelle Enterprises Inc. 603-425-2221 www.cirelle.com Web Application Development & Design www.cirelle.net ProSpeed High Speed Dial-up - 6 Times Faster www.cedata.com Web, FTP, Email Hosting Services www.mlsbot.com NNEREN MLS IDX Services When You Want It Done Well, Just Call Cirelle It's not just a Rhyme... There's a Reason!

...eous Assignee: unassigned-bugs at mindrot.org Reporter: jsegitz at suse.de We (openSUSE) recently added patches for openssh that Fedora already carried for a long time: https://build.opensuse.org/package/show/openSUSE:Factory/openssh We added five patches: * openssh-7.8p1-role-mls.patch Proper handling of MLS systems and basis for other SELinux improvements * openssh-6.6p1-privsep-selinux.patch Properly set contexts during privilege separation * openssh-6.6p1-keycat.patch Add ssh-keycat command to allow retrival of authorized_keys on MLS setups with polyinstantiati...

...d context as context=*system_u:system_r:unconfined_t:s0-s0:c0.c1023.* *What I observed is after changing the permission using semanage command also, its still showing the system_u:system_r. * *Check the semanage login/User output :* *semanage login -l* *Login Name SELinux User MLS/MCS Range Service* *__default__ unconfined_u s0-s0:c0.c1023 ** *root unconfined_u s0-s0:c0.c1023 ** *system_u system_u s0-s0:c0.c1023 ** *semanage user -l* * Labeling MLS/ MLS/...

...s site installs alot of IE addons (mainly report templates and an ActiveX control to print pdf's), and the install of these seems to go without a hitch, using IE6 over Wine. I start specifying what I want in the report, and this goes well until it needs to transfer me to another secure site (NWMLS.com), where the actual data is acquired. But it doesn't know what site to refer me to, and this is the problem. It says (screenshot attached): Select MLS Interface No MLS Interfaces Configured! Contact Tech. Support at (800) 828-0970 So I contacted tech support, and they told me how to...

...8bdb5c6e72cdd4bd3a6443da6d6807f03edba36ddc3e6e46d selinux-policy-doc-3.7.19-260.el6_6.1.noarch.rpm 31210d50e729f455219779c778a2bb52e2c9ddbc4a19b133339f776b90cfb810 selinux-policy-minimum-3.7.19-260.el6_6.1.noarch.rpm 1303399aeae7d95abe9424efbbeb453d556a50cbdf9d57c2a026aea8e3fc9ccc selinux-policy-mls-3.7.19-260.el6_6.1.noarch.rpm f5328b054f2c671405cb1ee266e874ed49e9e73f7a68b9b072563f6222e41723 selinux-policy-targeted-3.7.19-260.el6_6.1.noarch.rpm x86_64: fa1560968aea639772d5960a2796d7022e3d1c58a09bebffd2824249aea26b96 selinux-policy-3.7.19-260.el6_6.1.noarch.rpm 9368526010e071b8bdb5c6e72cdd4...

...555f80af904b0423be57d95730dd6bf5ef934d48e9f915282 selinux-policy-doc-3.7.19-260.el6_6.2.noarch.rpm 54c5786efda3da93e31556258a8cadde4bec938da1027fc24c3e4d822ef9af49 selinux-policy-minimum-3.7.19-260.el6_6.2.noarch.rpm d2b65353dc1db08d865fcf725a40a9b8457e659ec8fc6d93b1d053d567fa1831 selinux-policy-mls-3.7.19-260.el6_6.2.noarch.rpm c719c22596bb7e5272f7359aaa92a9798bb2cd31d9a47ee04b565375b0725ec7 selinux-policy-targeted-3.7.19-260.el6_6.2.noarch.rpm x86_64: cb79dfabcda8be35ef537edb7fc9ec99a1484131d961d520e3e5f2a3c2abd51f selinux-policy-3.7.19-260.el6_6.2.noarch.rpm 921a73ad0063ab3555f80af904b04...