SELinux and PostgreSQL: a worthwhile union? [LWN.net]
When your editor was in Tokyo recently, he had the privilege to talk with KaiGai Kohei at some length about the SE-PgSQL patch set. This work, developed by KaiGai for the last two years or so, integrates SELinux with the PostgreSQL database manager, enabling fine-grained control over access to data stored within a database. The SE-PgSQL patch has struggled to get into the PostgreSQL mainline; it i
LKML: Linus Torvalds: Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel
Re: [PATCH] Version 3 (2.6.23-rc8) Smack: Simplified Mandatory Access Control Kernel On Mon, 1 Oct 2007, James Morris wrote: > > Merging Smack, however, would lock the kernel into the LSM API. > Presently, as SELinux is the only in-tree user, LSM can still be removed. Hell f*cking NO! You security people are insane. I'm tired of this "only my version is correct" crap. The whole and only point of L
Linux Kernel Watch番外編：セã‚ュリティをやã£ã¦ã‚‹ã‚„ã¤ã‚‰ã¯ç‹‚ã£ã¦ã„ã‚‹ï¼Ÿï¼ ï¼ ï¼ IT
ä¸æ‘　雄一 日本SELinuxユーザ会 2007/10/31 “insaneâ€ã¨ã¯ã€Œæ£æ°—ã§ãªã„ã€ã€Œç‹‚ã£ãŸã€ã€Œéžå¸¸è˜ãªã€ã¨ã„ã†æ„味ãŒã‚ã‚Šã¾ã™ã€‚ãã®è¨€è‘‰ãŒã‚ã®Linusã‹ã‚‰ã€ã‚»ã‚ュリティを考ãˆã‚‹äººãŸã¡ã«æŠ•ã’られã¾ã—ãŸã€‚ã¯ãŸã—ã¦ãã®çœŸæ„ã¨ã¯ï¼Ÿ Linuxフォーラムã§äººæ°—ã®é€£è¼‰ã€ŒLinux Kernel Watchã€ç•ªå¤–ç·¨ã¨ã—ã¦ã€ãƒ¡ãƒ¼ãƒªãƒ³ã‚°ãƒªã‚¹ãƒˆã‹ã‚‰æ°—ã«ãªã‚‹ç™ºè¨€ã‚’ピックアップã—ã¦ã¿ã¾ã—ãŸã€‚本家Linuxフォーラムã®è¨˜äº‹ã€Œ10月版　ã‚ã‚“ãªã‚³ã‚¢ã„ã„ãªã€åã‘ãŸã‚‰ã„ã„ãªã€ã‚‚åŒæ™‚公開ã—ã¦ãŠã‚Šã¾ã™ã®ã§ã€ã‚ã‚ã›ã¦ãŠèªã¿ãã ã•ã„（編集部） ãã£ã‹ã‘ã¯Linusã®ç™ºè¨€ ã„ã¤ã‚‚ã¯Linuxフォーラムã§é€£è¼‰ã•ã‚Œã¦ã„る「Linux Kernel Watchã€ã§ã™ãŒã€ä»Šå›žã¯ãã®ç•ªå¤–ç·¨ã¨ã—ã¦ã€ã‚»ã‚ュアOSã«æ³¨ç›®ã—ãŸKernel Watchã‚’ãŠå±Šã‘ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ã¾ãšãã£ã‹ã‘ã¨ã—ã¦å–り上ã’ãŸã„ã®ã¯ã€ã‚ã®Linus Torv
ã©ã†ã—ã¦ã‚‚ public_htmlã®ãƒ•ã‚¡ã‚¤ãƒ«ãŒForbiddenã«ãªã£ã¦ã—ã¾ã†äººã¸ | fslashtã®æ—¥è¨˜ | スラド
STATUS: æ•…éšœä¸x2 /home/USENAME/ ã‚„ /home/USERNAME/public_html/ ã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©ã¯ã€711(ã¾ãŸã¯755)ã«ã—ã¾ã—ãŸã。.htaccessã«è¨˜è¿°ãƒŸã‚¹ã¯ãªã„ã§ã™ã？ .htaccess自体ã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©ã«ã‚‚注æ„ã§ã™ã‚ˆã€‚ ã‚ã¨ã€httpd.confã®è¨å®šã¯ã€ŒUserDir public_htmlã€ã«ã—ãŸï¼Ÿ ãã‚Œã§ã‚‚ダメ？ ã˜ã‚ƒã‚ã€ã¨ã£ã¦ãŠãã®ã‚³ãƒžãƒ³ãƒ‰ã‚’ãŠæ•™ãˆã—ã¾ã—ょã†ã€‚ ã©ã†ã§ã™ï¼Ÿè¦‹ãˆã‚‹ã‚ˆã†ã«ãªã£ãŸã§ã—ょã†ï¼ ã¯ã„ã¯ã„ã¯ã„。ãŠç¤¼ãŒã—ãŸã„ã£ã¦ï¼Ÿã§ã¯ã€ã“ã¡ã‚‰ã‹ã‚‰ã¯ã¦ãªãƒã‚¤ãƒ³ãƒˆã®é€ä¿¡ã‚’…（殴 ãˆãƒ¼ã€Fedora Core3以é™ã‚„CentOSã§ã¯ã€SELinuxãŒæœ‰åŠ¹ã«ãªã£ã¦ã„ã‚‹ã®ã§ã™ãŒã€ã€ŽSELinuxã¯ï¼Œãƒ•ã‚¡ã‚¤ãƒ«ç‰ã®ãƒªã‚½ãƒ¼ã‚¹ã«ã€Œã‚¿ã‚¤ãƒ—ã€ã¨å‘¼ã°ã‚Œã‚‹ãƒ©ãƒ™ãƒ«ã‚’付与ã—ã¦ç®¡ç†ã—ã¦ã„ã¾ã™ã€‚（ä¸ç•¥ï¼‰ã“ã®ã‚¿ã‚¤ãƒ—ãŒé©åˆ‡ã«ä»˜ä¸Žã•ã‚Œãªã„ã“ã¨ã§ï¼Œãƒˆãƒ©ãƒ–ルã«ãªã‚‹ã“ã¨ãŒã‚ˆãã‚ã‚Š
KaiGaiã®ä¿ºãƒ¡ãƒ¢: mod_selinux
Apacheã®BASICèªè¨¼ã¨ã€SELinuxã®setexeccon()を組ã¿åˆã‚ã›ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’作æˆã—ã¦ã¿ãŸã€‚以下ã‹ã‚‰ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã§ãる。 http://sepgsql.googlecode.com/files/mod_selinux-0.1-r906.i386.rpm http://sepgsql.googlecode.com/files/mod_selinux-0.1-r906.src.rpm ã¾ãšã€mod_selinux-0.1-r906.i386.rpmをインストール 次ã«ã€HTTP BASICèªè¨¼ã®ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ—。/var/www/cgi-bin ã« CGIスクリプトをé…ç½®ã™ã‚‹ã¨ã—ã¦ã€ä»¥ä¸‹ã®ã‚ˆã†ã« .htaccess を作æˆã™ã‚‹ã€‚AuthUserFile /var/www/cgi-bin/.htpasswd AuthName "Input Your Name And Passwo
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
events/EndYearParty2008 - Japan Secure Operating System Users Group
{{#tags}}- {{label}}
{{/tags}}