Some goodies from OpenWall
[Posted June 17, 2003 by corbet]
Solar Designer has sent out
an announcement
of a new set of security-oriented releases from OpenWall. These components
are, of course, integrated into
Openwall Linux, but they are
available separately for integration into other distributions as well.
Here's what's available:
- A patch for the 2.4.21
kernel fixing problems and adding a number of security features.
You can now use 2.4.21 in Openwall Linux, though, in true conservative
form, they still recommend sticking with 2.2 for now.
- msulogin, a version of
the "sulogin" program (which is normally used to control access to a
system in single-user mode). The twist offered by msulogin is that it
can handle multiple root accounts.
- tcb, an alternative shadow
password implementation. The difference is that tcb implements
separate shadow files for each user. This technique allows group
permissions to be used to implement password policies, and it allows
the entire password subsystem to work with no need for root
privileges.
These tools and patches can be used as components in a more secure Linux
system, and that can only be a good thing.
(
Log in to post comments)
