Hello,
I could download new version so here is little update.
Saturday, August 2, 2003, 11:53:10 AM, I wrote:
>> I just tagged CVS with RELEASE_1_0_RC3 and RELEASE_1_0.
>> CerbNG-1.0RC3 will be presented for a week, I think.
Did you create new branch (RELEASE_1_0_RC3) on purpose or by accident?
:)
> Did you add option to uninstall cerb?
I think this should be introduced before 1.0
> What purpose does have op-test? They always fails on my computer.
Here is stuff that IMHO should be fixed before 1.0:
1) compiling warning
#v+
sh make_operations.sh
Cerb has been compiled for UP machine.
bison -d -o clang2.c clang2.y
clang2.y: warning: 58 shift/reduce conflicts and 50 reduce/reduce conflicts
cc -O -pipe -march=pentiumpro -I/usr/home/takeda/cvs/cerb/cerb-ng/ucerb/../kcerb -g -Wall -Wno-unused -c libcerb.c
#v-
It's just a warning, but maybe it would be good idea to fix it.
2) testing
#v+
Running op tests:
Running test INVALID... FAIL (exit code: 1)
Running test INVALID... FAIL (exit code: 1)
Running test INVALID... FAIL (exit code: 1)
[...] - it's more, but all lines are identical, all op test fail,
other test pass.
#v-
On console I see:
#v+
CerbNG:ERROR:fcb_cerb: Operation not permitted.
CerbNG:ERROR:fcb_cerb: Operation not permitted.
CerbNG:ERROR:fcb_cerb: Operation not permitted.
CerbNG:ERROR:fcb_cerb: Bad address of ca_tab: 0xdeadc0de.
CerbNG:ERROR:fcb_cerb: Bad address of ca_tab: 0.
CerbNG:ERROR:fcb_cerb: Bad address of ca_scalls: 0xdeadc0de.
CerbNG:ERROR:fcb_cerb: Cannot copy syscalls from userland.
CerbNG:ERROR:fcb_cerb: Too many rules: 16384 (should be less than or equal to 8192).
CerbNG:ERROR:fcb_cerb: Too many rules: 8193 (should be less than or equal to 8192).
CerbNG:ERROR:fcb_cerb: Too many rules: 4294967295 (should be less than or equal to 8192).
CerbNG:ERROR:fcb_cerb: There are no rules.
CerbNG:ERROR:fcb_cerb: Too big table number: 6 (should be less than 3).
CerbNG:ERROR:fcb_cerb: Too big table number: 3 (should be less than 3).
CerbNG:ERROR:fcb_cerb: Too big table number: 4294967295 (should be less than 3).
CerbNG:ERROR:fcb_cerb: Too many syscalls to catch: 788 (should be less than 394).
CerbNG:ERROR:fcb_cerb: Too many syscalls to catch: 394 (should be less than 394).
CerbNG:ERROR:fcb_cerb: Too many syscalls to catch: 4294967295 (should be less than 394).
CerbNG:ERROR:fcb_cerb: ca_nrules (10) is different than real number of urules (5).
CerbNG:ERROR:fcb_cerb: ca_nrules (6) is different than real number of urules (5).
CerbNG:ERROR:fcb_cerb: ca_nrules (2) is different than real number of urules (3 or more).
CerbNG:ERROR:fcb_cerb: ca_nrules (4) is different than real number of urules (5 or more).
CerbNG:ERROR:fcb_urule_fill: Cannot copy table with arguments from userland.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Too many elements in table: 69 (should be less than or equal to 64).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Too many elements in table: 65 (should be less than or equal to 64).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: ur_args field is 0xdeadc0de and should be NULL, because ur_nargs is 0.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Bad numbers of elements in table: 32 (should be 0)
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,true'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,true'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,true'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,false'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,false'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,false'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,next'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,next'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,next'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Function number too big: 136 (should be less than 136).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Function number too big: 272 (should be less than 136).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect v_type of value number 0 (id=1, type=11, op=1)
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect v_type of value number 0 (id=1, type=22, op=1)
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect v_type of value number 0 (id=1, type=4294967295, op=1)
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect type of value 0.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect type of value 0.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect type of value 0.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Error while coping argument [valno: 0].
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Bad string address [valno: 0].
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: String too long: 4096 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: String too long: 8192 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: String too long: 4294967295 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: String 1 too long: 4096 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: String 1 too long: 8192 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Error while coping argument [valno: 0].
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Table too big: 32 (should be less than 32).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Table too big: 64 (should be less than 32).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Table too big: 4294967295 (should be less than 32).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Bad strings table address [valno: 0].
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Strings table too big: 4096 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Strings table too big: 8192 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Strings table too big: 4294967295 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_cerb: Operation not permitted.
CerbNG:ERROR:fcb_cerb: Operation not permitted.
CerbNG:ERROR:fcb_cerb: Operation not permitted.
CerbNG:ERROR:fcb_cerb: Bad address of ca_tab: 0xdeadc0de.
CerbNG:ERROR:fcb_cerb: Bad address of ca_tab: 0.
CerbNG:ERROR:fcb_cerb: Bad address of ca_scalls: 0xdeadc0de.
CerbNG:ERROR:fcb_cerb: Cannot copy syscalls from userland.
CerbNG:ERROR:fcb_cerb: Too many rules: 16384 (should be less than or equal to 8192).
CerbNG:ERROR:fcb_cerb: Too many rules: 8193 (should be less than or equal to 8192).
CerbNG:ERROR:fcb_cerb: Too many rules: 4294967295 (should be less than or equal to 8192).
CerbNG:ERROR:fcb_cerb: There are no rules.
CerbNG:ERROR:fcb_cerb: Too big table number: 6 (should be less than 3).
CerbNG:ERROR:fcb_cerb: Too big table number: 3 (should be less than 3).
CerbNG:ERROR:fcb_cerb: Too big table number: 4294967295 (should be less than 3).
CerbNG:ERROR:fcb_cerb: Too many syscalls to catch: 788 (should be less than 394).
CerbNG:ERROR:fcb_cerb: Too many syscalls to catch: 394 (should be less than 394).
CerbNG:ERROR:fcb_cerb: Too many syscalls to catch: 4294967295 (should be less than 394).
CerbNG:ERROR:fcb_cerb: ca_nrules (10) is different than real number of urules (5).
CerbNG:ERROR:fcb_cerb: ca_nrules (6) is different than real number of urules (5).
CerbNG:ERROR:fcb_cerb: ca_nrules (2) is different than real number of urules (3 or more).
CerbNG:ERROR:fcb_cerb: ca_nrules (4) is different than real number of urules (5 or more).
CerbNG:ERROR:fcb_urule_fill: Cannot copy table with arguments from userland.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Too many elements in table: 69 (should be less than or equal to 64).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Too many elements in table: 65 (should be less than or equal to 64).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: ur_args field is 0xdeadc0de and should be NULL, because ur_nargs is 0.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Bad numbers of elements in table: 32 (should be 0)
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,true'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,true'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,true'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,false'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,false'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,false'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,next'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,next'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect ,,next'' argument.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Function number too big: 136 (should be less than 136).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Function number too big: 272 (should be less than 136).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect v_type of value number 0 (id=1, type=11, op=1)
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect v_type of value number 0 (id=1, type=22, op=1)
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect v_type of value number 0 (id=1, type=4294967295, op=1)
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect type of value 0.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect type of value 0.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Incorrect type of value 0.
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Error while coping argument [valno: 0].
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Bad string address [valno: 0].
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: String too long: 4096 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: String too long: 8192 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: String too long: 4294967295 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: String 1 too long: 4096 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: String 1 too long: 8192 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Error while coping argument [valno: 0].
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Table too big: 32 (should be less than 32).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Table too big: 64 (should be less than 32).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Table too big: 4294967295 (should be less than 32).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Bad strings table address [valno: 0].
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Strings table too big: 4096 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Strings table too big: 8192 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
CerbNG:ERROR:fcb_urule_fill: Strings table too big: 4294967295 (should be less than 4096).
CerbNG:ERROR:fcb_cerb: Error when filling rule 0.
#v-
3) bugs in rules
- apache.cb still doesn't work with apache 2.0, it didn't display any
error, but it don't start. I couldn't find the problem, strace
didn't work while cerber was loaded (in some previous version, I'll
try it again)
- crontab - didn't work for users which aren't member of wheel group,
it also didn't work while I switched user using su (it was
depending on login variable), I sent modiffied version, but I guess
it was rejected o overlooked. This doesn't allow to change root's
crontab when you cannot login as root directly (but you need to use
su to become root)
- openssh - I'm not 100% sure if this is bug in cerber, I noticed that
"w" and "who" commands doesn't realy show who is realy logged in,
also last does show that somebody logged in, but it shows that user
is still logged in even when that person loggs out. This happend to
regular users, I'm actually shown correctly (but I'm member of wheel
group). I think there could be bug in openssh rules.
- screen - doesn't have rights to check if password is correct (while
is locked by ^A-x) but that could be on purpose - screen then asks
to specify custom password
4) And very tiny bug (date is old :):
Aug 2 22:33:59 freebsd /kernel: CerbNG v1.0-RC3-2003070401 loaded.
5) this could be rather feature request, I noticed just now that cerb
cannot compile statement like this one:
if (a == b) {
something(a)
} else if (a == c) {
something_else(b)
}
After 'else' it's expecting '{' It doesn't allow 'if'
--
Best regards,
Dariusz mailto:takeda@...
SCSA, SCNA, LPI, CCNA, MCP certified
|