OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: FreeBSD trusted execution system: beta testers wanted

From: Oleg Palij (o.palijdp.uz.gov.ua)
Date: Wed Mar 16 2005 - 00:54:13 CST

Hi!

Thanks for developing such interesting feature :) !

But I have some problems, which I cant understand.

# sysctl security.mac.chkexec.enforce=0
security.mac.chkexec.enforce: 1 -> 0

# setfhash /usr/local/sbin/logrotate
# getfhash /usr/local/sbin/logrotate
/usr/local/sbin/logrotate: sha1 78513a038cd9416f2be710b6732369b96874b364

# sysctl security.mac.chkexec.enforce=1
security.mac.chkexec.enforce: 0 -> 1

# /usr/local/sbin/logrotate
bash: /usr/local/sbin/logrotate: Operation not permitted

# getfhash /usr/local/sbin/logrotate
/usr/local/sbin/logrotate: sha1 78513a038cd9416f2be710b6732369b96874b364

How can I see what exactly goes wrong ???

Oleg.
_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"