LWN.net Logo

Trustees Linux for 2.6 kernel

From:  Andrew Ruder <aeruder@ksu.edu>
To:  linux-security-module@wirex.com
Subject:  Trustees Linux for 2.6 kernel
Date:  Sun, 31 Oct 2004 23:46:01 -0600

Hello all,

Some of you may be (or probably not) familiar with the trustees acl project
( http://trustees.sourceforge.net ).  For those of you who are not,
trustees is a non-posix recursive acl system.  Seeing as I can probably not
explain it any better than Vyacheslav Zavadsky did on the website listed
above, I encourage you to look there for a more detailed description.

I have ported trustees to the 2.6 kernel using the lsm api.  I've been
using it on my own machine for the better part of the week, and it seems to
work fairly well.

Just wondering/hoping someone can take a look and offer any suggestions,
bugs, criticisms, etc.  I would really appreciate it as I am very new to
kernel programming in general (this is my first project).  I know some of
the code is still somewhat messy.

http://www.aeruder.net/files/miscprojects/0CSource/truste...

The tarball is checked out from my subversion repository, so you should be
able to do an svn update to pull down the latest version of the code.

Cheers,
Andrew Ruder

Instructions to use:
1) untar the downloaded file
2) cd trustees/module
     make install
3) cd ../src
     make
4) create a config file
I am currently using this config file
[/dev/hdb6]/var/www:www-data:RWEBX:andy:RWEBX
[/dev/hdb6]/usr/GNUstep:andy:RWEBX
[/dev/hdb6]/usr/local:andy:RWEBX
[/dev/hdb2]/andy/Project/Archives/svn:www-data:RWEBX:andy:RWEBX
[/dev/hdb1]/:www-data:RBE
5) depmod ; modprobe trustees
6) mount -t trusteesfs none /path/to/mount
7) /path/to/trustees/src/settrustees -f /path/to/config -t
/path/to/mount/trustees

If you change the config and want to reload the changes, just use the -d
flag on the settrustees line.


Copyright © 2004, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds