[tomoyo-users 921] use_ppprofile 2 の WARNING メッセージ

[早間義博]

$BAa4V$G$9!#(B
kernel gentoo sys-kernel/gentoo-sources-3.0.4-r2
tomoyo-tools-2.4 $B$N%I%-%e%a%s%H$K$"$k$h$&$K(B
linux-3.1-rc8.tar.gz $B$+$i(Bsecurity/tomoyo/ $B$r<h$j=P$7$F%3%T!<$7(B
$B$F$$$^$9!#(B
tomoyo-2.4-backport-for-3.0.patch $B$r%Q%C%A$7$F$$$^$9!#(B

tomoyo-tools-2.4 $B$K$7$F$+$i(B profile 2 $B$G$N(B WARNING: $B%m%0$,=P$J$$$N(B
$B$G$9$,!"2?$+;XDj$,I,MW$G$9$+!#(B
/usr/lib/tomoyo/init_policy $B$r<B9T$7$F$+$iJQ99$O$7$F$$$^$;$s!#(B
<kernel>
0: PROFILE_VERSION=20100903
1: 0-COMMENT=-----Disabled Mode-----
2: 0-CONFIG={ mode=disabled grant_log=no reject_log=yes }
3: 0-PREFERENCE={ max_audit_log=1024 max_learning_entry=2048 }
4: 1-COMMENT=-----Learning Mode-----
5: 1-CONFIG={ mode=learning grant_log=no reject_log=yes }
6: 1-PREFERENCE={ max_audit_log=1024 max_learning_entry=2048 }
7: 2-COMMENT=-----Permissive Mode-----
8: 2-CONFIG={ mode=permissive grant_log=no reject_log=yes }
9: 2-PREFERENCE={ max_audit_log=1024 max_learning_entry=2048}
10: 3-COMMENT=-----Enforcing Mode-----
11: 3-CONFIG={ mode=enforcing grant_log=no reject_log=yes }
12: 3-PREFERENCE={ max_audit_log=1024 max_learning_entry=2048 }

use_profile 2 $B$N>uBV$GL55v2D$N9T0Y$,9T$o$l$?>l9g!"L55v2D$N9T0Y$,$"$C(B
$B$?$3$H$rCN$j$?$$$N$G$9$,!"(Blog $B$^$?$O(B tomoyo-notifyd $B$K$h$kG'<1$$$:(B
$B$l$+$rF@$k$K$O$I$N$h$&$K$7$?$iNI$$$N$G$7$g$&!#(B

$B#2Bf$N%[%9%H$G(B profile $B$,0[$J$k>uBV$GF1$8%3%^%s%I$,<B9T$5$l$^$7$?!#(B
profile 1 $B$N$b$H$G<B9T$7$?>l9g$K(B
file create /var/lib/local/pgmexe 0666
$B$,DI2C$5$l$F$$$k$N$K(B
policy 2 $B$b$H$G$O(B WARNING $B%m%0$b;D$i$:!"(Btomoyo-notifyd $B$+$i$N%a!<%k(B
$B$bMh$^$;$s!#(B
$B$I$A$i$bBP>]$H$J$k%G%#%l%/%H%j$KBP$9$k(B policy $B$O$"$j$^$;$s!#(B
($BL55v2D$N>uBV$G$9!#(B)

profile 3 $B$,;XDj$5$l$F$$$k%W%m%0%i%`(B(apache2)$B$G$O(B policy $B$KL5$$%U%!(B
$B%$%k$r<B9T$7$h$&$H$7$F!"(Btomoyo-notifyd $B$+$i%a!<%k$,Mh$F$$$^$9$,(B
syslog $B$K$O5-O?$5$l$F$$$^$;$s!#(B

-- $BAa4V(B

[Tetsuo Handa]

$BAa4V5AGn$5$s$O=q$-$^$7$?!'(B

Post by 早間義博
tomoyo-tools-2.4 $B$K$7$F$+$i(B profile 2 $B$G$N(B WARNING: $B%m%0$,=P$J$$$N(B
$B$G$9$,!"2?$+;XDj$,I,MW$G$9$+!#(B

$B$^$:!"B>$NFI<T$N:.Mp$rHr$1$k$?$a$K!"%+!<%M%kB&$H%f!<%6%i%s%IB&$N6hJL$r(B
$B$O$C$-$j$7$?$$$H;W$$$^$9!#(B tomoyo-tools $B$O!"%f!<%6%i%s%IB&$N%W%m%0%i%`$G$9!#(B

TOMOYO 2.2 $B$N(B TOMOYO-WARNING: $B$d(B TOMOYO 2.3 $B$N(B WARNING: $B$O!"%+!<%M%kB&$N(B
$B%W%m%0%i%`$,=PNO$7$F$$$k%a%C%;!<%8$G$9!#(B TOMOYO 2.4 $B$G(B WARNING: $B$,=P$J$$$N$O!"(B
$B%m%0$N9??e$rHr$1$k$?$a$K=PNO$7$J$$;EMM$KJQ99$5$l$?$+$i$G$9!#(B

tomoyo-tools-2.4 $B$r%$%s%9%H!<%k$7$?$+$i=P$J$$$N$G$O$J$/!"(B
TOMOYO 2.4 $BBP1~$N%+!<%M%k$rMxMQ$7$F$$$k$+$i=P$J$$$N$G$9!#(B

Post by 早間義博
use_profile 2 $B$N>uBV$GL55v2D$N9T0Y$,9T$o$l$?>l9g!"L55v2D$N9T0Y$,$"$C(B
$B$?$3$H$rCN$j$?$$$N$G$9$,!"(Blog $B$^$?$O(B tomoyo-notifyd $B$K$h$kG'<1$$$:(B

TOMOYO 2.4 $B0J9_$G$O!"%]%j%7!<$K0cH?$7$?%"%/%;%9MW5a$N%m%0$O(B
/sys/kernel/security/tomoyo/audit $B$K=PNO$5$l$^$9!#(B /usr/sbin/tomoyo-auditd $B$r(B
$B<B9T$9$k$3$H$K$h$j!"(B use_profile 2 $B$GH/@8$7$?%]%j%7!<$K0cH?$7$?%"%/%;%9MW5a$N(B
$B%m%0$O(B /var/log/tomoyo/reject_002.log $B$KJ]B8$5$l$^$9!#$3$***@_Dj$O(B
/etc/tomoyo/tools/auditd.conf $B$G;XDj$G$-$^$9!#(B

Post by 早間義博
$B#2Bf$N%[%9%H$G(B profile $B$,0[$J$k>uBV$GF1$8%3%^%s%I$,<B9T$5$l$^$7$?!#(B
profile 1 $B$N$b$H$G<B9T$7$?>l9g$K(B
file create /var/lib/local/pgmexe 0666
$B$,DI2C$5$l$F$$$k$N$K(B
policy 2 $B$b$H$G$O(B WARNING $B%m%0$b;D$i$:!"(Btomoyo-notifyd $B$+$i$N%a!<%k(B
$B$bMh$^$;$s!#(B
$B$I$A$i$bBP>]$H$J$k%G%#%l%/%H%j$KBP$9$k(B policy $B$O$"$j$^$;$s!#(B
($BL55v2D$N>uBV$G$9!#(B)

/usr/sbin/tomoyo-queryd $B$d(B /usr/sbin/tomoyo-notifyd $B$O6/@)%b!<%I!J%G%U%)%k%H(B
$***@_Dj$G$O(B use_profile 3 $B!K$GH/@8$7$?%]%j%7!<0cH?$rDLCN$9$k$?$a$N$b$N$G$9!#(B

$B6/@)%b!<%I$GH/@8$7$?%]%j%7!<$K0cH?$7$?%"%/%;%9MW5a$N%m%0$O!"(B
$B!J(B /usr/sbin/tomoyo-queryd $B$d(B /usr/sbin/tomoyo-notifyd $B$,F0:n$7$F$$$k>l9g!"!K(B
/sys/kernel/security/tomoyo/query $B$K$b=PNO$5$l$^$9!#(B

$B6/@)%b!<%I$G$O$J$$>l9g!"(B /sys/kernel/security/tomoyo/query $B$K$O=PNO$5$l$J$$(B
$B$?$a!"(B /usr/sbin/tomoyo-queryd $B$H(B /usr/sbin/tomoyo-notifyd $B$O2?$b$7$^$;$s!#(B

[早間義博]

$BAa4V$G$9!#(B
$B$"$j$,$H$&$4$6$$$^$9!#(B
/usr/sbin/tomoyo-auditd
$B$r<B9T$7$^$7$?!#(B
$BN/$^$C$F$$$?%m%0$b=PNO$5$l$F$-$^$7$?!#(B

-- $BAa4V(B