Re: [PATCH 0/8] CaitSith LSM module

Path	csiph.com!feeder.erje.net!2.eu.feeder.erje.net!news.unit0.net!news.panservice.it!diesel.cu.mi.it!bofh.it!news.nic.it!robomod
From	John Johansen <john.johansen@canonical.com>
Newsgroups	linux.kernel
Subject	Re: [PATCH 0/8] CaitSith LSM module
Date	Sun, 21 May 2017 07:40:01 +0200
Message-ID	<tJrKV-3Ec-5@gated-at.bofh.it> (permalink)
References	<suHqN-5zP-7@gated-at.bofh.it> <svS0N-2QU-19@gated-at.bofh.it> <sw85z-4Vb-11@gated-at.bofh.it> <sGznQ-1kN-9@gated-at.bofh.it> <sGKVX-8H-17@gated-at.bofh.it> <tJrhT-3bg-1@gated-at.bofh.it>
Organization	Canonical
User-Agent	Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.1.1
MIME-Version	1.0
Content-Type	text/plain; charset=utf-8
Content-Language	en-GB
Content-Transfer-Encoding	7bit
Sender	robomod@news.nic.it
List-ID	<linux-kernel.vger.kernel.org>
X-Mailing-List	linux-kernel@vger.kernel.org
Approved	robomod@news.nic.it
Lines	47
X-Original-Cc	linux-kernel@vger.kernel.org
X-Original-Date	Sat, 20 May 2017 22:31:42 -0700
X-Original-Message-ID	<8c6da617-3325-d60d-805f-5e5c1fa322c6@canonical.com>
X-Original-References	<1477054150-4772-1-git-send-email-penguin-kernel@I-love.SAKURA.ne.jp> <3232ef1d-b378-a8a2-f113-03b2db4cc332@canonical.com> <201610252026.HCH52140.FOtVFOJLQMSOHF@I-love.SAKURA.ne.jp> <201611231531.DGH52135.QtFVOFJLOHFOSM@I-love.SAKURA.ne.jp> <2908442d-90f1-7fa2-24ff-0833f6bd2d95@canonical.com> <201705211359.BBE26079.LSJFOMHFOVQFOt@I-love.SAKURA.ne.jp>
X-Original-Sender	linux-kernel-owner@vger.kernel.org
Xref	csiph.com linux.kernel:1646260

Show key headers only | View raw

On 05/20/2017 09:59 PM, Tetsuo Handa wrote:
> John Johansen wrote:
>> On 11/22/2016 10:31 PM, Tetsuo Handa wrote:
>>> Tetsuo Handa wrote:
>>>> John Johansen wrote:
>>>>>> In order to minimize the burden of reviewing, this patchset implements
>>>>>> only functionality of checking program execution requests (i.e. execve()
>>>>>> system call) using pathnames. I'm planning to add other functionalities
>>>>>> after this version got included into mainline. You can find how future
>>>>>> versions of CaitSith will look like at http://caitsith.osdn.jp/ .
>>>>>>
>>>>> Thanks I've started working my way through this, but it is going to take
>>>>> me a while.
>>>>>
>>>>
>>>> Thank you for your time.
>>>
>>> May I hear the status? Is there something I can do other than waiting?
>>>
>> progressing very slowly, I have some time over the next few days as its a
>> long weekend here in the US some hopefully I can finish this up
>>
> 
> May I hear the status again?
> 
Yes, sorry. I just haven't had time too look at it recently. I am sorry that
it has been so long. I am just going to have to book a day off and do it. I'll
see if I can't get a day next week (getting late but I can try or the following)


> 
> 
> On 5th March 2017, a CTF game was held in an event titled
> "CyberColosseo x SecCon" ( http://2016.seccon.jp/news/#137 ). I gave a
> simple troubleshooting-like system-analyzing quiz using SSH shell session
> where operations are restricted by CaitSith.
> 
> Since the VM will be useful as an example of how to configure
> CaitSith's policy configuration, I made a downloadable version.
> 
>   http://osdn.jp/frs/redir.php?m=jaist&f=/caitsith/67303/SecCon20170305-CaitSith.zip
>   MD5: 99bad6936d8cdeb37d0d6af99265a2ac
> 
> This VM is configured for VMware Player 12 / 4 CPUs / 2048MB RAM.
> An IPv4 address will be assigned upon boot using DHCP service on the host network.
> SSH username and password are both "caitsith".
>

Thread

Re: [PATCH 0/8] CaitSith LSM module Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> - 2017-05-21 07:10 +0200
  Re: [PATCH 0/8] CaitSith LSM module John Johansen <john.johansen@canonical.com> - 2017-05-21 07:40 +0200
    Re: [PATCH 0/8] CaitSith LSM module Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> - 2017-05-21 08:00 +0200

csiph-web