早間義博
2011-05-22 21:14:05 UTC
$BAa4V$G$9!#(B
os linux-2.6.37-gentoo-r4
tomoyo-tools-2.3.0_p20100820($B%o%$%k%I%+!<%H%Q%C%AHsE,1~(B)
$B<g$?$k%Q%C%1!<%8$r(B permissive $B%b!<%I$GF0$+$7;O$a$?$N$G$9$,!"(B
$B%i%$%V%i%j(B(glibc)$B$r%"%C%W%G!<%H$7$?$H$3$m(B100$B0J>e$N%3%^%s%I$,(B
/lib/libc-2.12.2.so
/lib/libdl-2.12.2.so
/lib/libm-2.12.2.so
/lib/libcrypt-2.12.2.so
/lib/libpthread-2.12.2.so
/lib/libnss_files-2.12.2.so
$B$N(B 6 $B%i%$%V%i%j$rFI$a$J$$$HBgNL$N%m%0$r=P$7B3$1$k>uBV$K$J$j$^$7$?(B
(permissive $B%b!<%I$J$N$G%m%0$,;D$k$@$1$9(B)$B!#(B
$B<+A0$G:***@.$7$?%3%^%s%I$b$"$j$^$9$,(B
awk bash bzip2 cat chmod chown cp cut date diff dirname echo expr
false find formail grep
$B$J$I$N%3%^%s%I$b4^$^$l$F$$$^$9!#(B
$BF0:n>e$OLdBj$J$$$b$N$N(B
WARNING: Access
$B$r(B swatch $B$G=&$C$F$$$k$N$G!"BgA{F0$G$9!#(B
$B$9$Y$F$,(B 6 $B%i%$%V%i%jA4It$rMW5a$7$F$$$k$o$1$G$O$"$j$^$;$s$,(B
WARNING $B$r5/$3$7$?A4%3%^%s%I$K(B
allow_read /lib/\*
$B$rF~$l$^$7$?!#(B
$B$^$?!"KX$IF1$8(B($B%"%W%j%1!<%7%g%s$HIU?o$7$F%i%$%V%i%j$,B?$$(B)$B5!3#$G$O(B
$B$3$N$h$&$J8=>]$O5/$-$F$$$^$;$s!#(B
$B$H$j$"$($:(B profile $B$rJQ99$7$h$&$H;W$C$?$N$G$9$,!"(Btomoyo-editpolicy
$B$G(B
2-CONFIG={ mode=permissive }
$B$r(Bm
2-CONFIG={ mode=learning }
$B$KJQ99=PMh$^$;$s(B
($B$I$3$+$KJ}K!$,=q$$$F$"$k$N$+$b$7$l$^$;$s!"(BDomain Transition
Editor $B$N$h$&$K(B $B:o=|$HDI2C$@$1$GBP1~$7$h$&$H$7$^$7$?(B)$B!#(B
/etc/tomoyo $B$N(B profile.conf $B$r%(%G%#%?$G=$@5$7(B tomoyo-loadpolicy
$B$G=q$-49$($^$7$?!#(B
$B8=:_$O(B tomoyo-tools-2.3.0_p20110522.ebuild
# gentoo(emerge) $B$NJ}8@$@$H;W$$$^$9!#(B
# $B%"%J%&%s%9$5$l$?(B 20110522 $B=$@5HGMQ$N%3%s%Q%$%k%$%s%9%H!<%k(B
# $B%;%C%H$G$9!#(B
# $B6!5k$5$l$F$$$k(B tomoyo-tools-2.3.0_p20100820.ebuild $B$r(B
# tomoyo-tools-2.3.0_p20110522.ebuild $B$H$7$F%3%T!<$7(B
# src_prepare() {
# epatch "${FILESDIR}"/${P}-flags-parallel.patch \
# "${FILESDIR}"/${P}-gentoo.patch
# $B$N(B epatch $BJ8$r:o=|$7$^$7$?!#(B
$B$KJQ99$7$F$$$^$9$,(B $B>u67$OF1$8$G$9!#F1$8%i%$%V%i%j$HF1$8(Bconfig $B$G(B
$B%3%s%Q%$%k$7$?(B kernel $B$J$N$K!"JRJ}$OA05-%i%$%V%i%j$N(B allow_read $B$r(B
$BMW5a$7$FMh$k$7B>J}$OEv3:%i%$%V%i%j(B $B$N(B allow_read $BL5$7$GF0$$$F$$$^(B
$B$9!#(B
$B2?$,9M$($i$l$k$N$G$7$g$&!#(B
-- $BAa4V(B
os linux-2.6.37-gentoo-r4
tomoyo-tools-2.3.0_p20100820($B%o%$%k%I%+!<%H%Q%C%AHsE,1~(B)
$B<g$?$k%Q%C%1!<%8$r(B permissive $B%b!<%I$GF0$+$7;O$a$?$N$G$9$,!"(B
$B%i%$%V%i%j(B(glibc)$B$r%"%C%W%G!<%H$7$?$H$3$m(B100$B0J>e$N%3%^%s%I$,(B
/lib/libc-2.12.2.so
/lib/libdl-2.12.2.so
/lib/libm-2.12.2.so
/lib/libcrypt-2.12.2.so
/lib/libpthread-2.12.2.so
/lib/libnss_files-2.12.2.so
$B$N(B 6 $B%i%$%V%i%j$rFI$a$J$$$HBgNL$N%m%0$r=P$7B3$1$k>uBV$K$J$j$^$7$?(B
(permissive $B%b!<%I$J$N$G%m%0$,;D$k$@$1$9(B)$B!#(B
$B<+A0$G:***@.$7$?%3%^%s%I$b$"$j$^$9$,(B
awk bash bzip2 cat chmod chown cp cut date diff dirname echo expr
false find formail grep
$B$J$I$N%3%^%s%I$b4^$^$l$F$$$^$9!#(B
$BF0:n>e$OLdBj$J$$$b$N$N(B
WARNING: Access
$B$r(B swatch $B$G=&$C$F$$$k$N$G!"BgA{F0$G$9!#(B
$B$9$Y$F$,(B 6 $B%i%$%V%i%jA4It$rMW5a$7$F$$$k$o$1$G$O$"$j$^$;$s$,(B
WARNING $B$r5/$3$7$?A4%3%^%s%I$K(B
allow_read /lib/\*
$B$rF~$l$^$7$?!#(B
$B$^$?!"KX$IF1$8(B($B%"%W%j%1!<%7%g%s$HIU?o$7$F%i%$%V%i%j$,B?$$(B)$B5!3#$G$O(B
$B$3$N$h$&$J8=>]$O5/$-$F$$$^$;$s!#(B
$B$H$j$"$($:(B profile $B$rJQ99$7$h$&$H;W$C$?$N$G$9$,!"(Btomoyo-editpolicy
$B$G(B
2-CONFIG={ mode=permissive }
$B$r(Bm
2-CONFIG={ mode=learning }
$B$KJQ99=PMh$^$;$s(B
($B$I$3$+$KJ}K!$,=q$$$F$"$k$N$+$b$7$l$^$;$s!"(BDomain Transition
Editor $B$N$h$&$K(B $B:o=|$HDI2C$@$1$GBP1~$7$h$&$H$7$^$7$?(B)$B!#(B
/etc/tomoyo $B$N(B profile.conf $B$r%(%G%#%?$G=$@5$7(B tomoyo-loadpolicy
$B$G=q$-49$($^$7$?!#(B
$B8=:_$O(B tomoyo-tools-2.3.0_p20110522.ebuild
# gentoo(emerge) $B$NJ}8@$@$H;W$$$^$9!#(B
# $B%"%J%&%s%9$5$l$?(B 20110522 $B=$@5HGMQ$N%3%s%Q%$%k%$%s%9%H!<%k(B
# $B%;%C%H$G$9!#(B
# $B6!5k$5$l$F$$$k(B tomoyo-tools-2.3.0_p20100820.ebuild $B$r(B
# tomoyo-tools-2.3.0_p20110522.ebuild $B$H$7$F%3%T!<$7(B
# src_prepare() {
# epatch "${FILESDIR}"/${P}-flags-parallel.patch \
# "${FILESDIR}"/${P}-gentoo.patch
# $B$N(B epatch $BJ8$r:o=|$7$^$7$?!#(B
$B$KJQ99$7$F$$$^$9$,(B $B>u67$OF1$8$G$9!#F1$8%i%$%V%i%j$HF1$8(Bconfig $B$G(B
$B%3%s%Q%$%k$7$?(B kernel $B$J$N$K!"JRJ}$OA05-%i%$%V%i%j$N(B allow_read $B$r(B
$BMW5a$7$FMh$k$7B>J}$OEv3:%i%$%V%i%j(B $B$N(B allow_read $BL5$7$GF0$$$F$$$^(B
$B$9!#(B
$B2?$,9M$($i$l$k$N$G$7$g$&!#(B
-- $BAa4V(B