You can subscribe to this list here.
2002 |
Jan
|
Feb
|
Mar
|
Apr
|
May
(11) |
Jun
(28) |
Jul
(27) |
Aug
(16) |
Sep
(37) |
Oct
(26) |
Nov
(119) |
Dec
(42) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2003 |
Jan
(76) |
Feb
(43) |
Mar
(99) |
Apr
(59) |
May
(42) |
Jun
(72) |
Jul
(61) |
Aug
(56) |
Sep
(19) |
Oct
|
Nov
|
Dec
|
From: <da...@us...> - 2003-08-03 12:36:56
|
Update of /cvsroot/cerber/cerb-ng/examples In directory sc8-pr-cvs1:/tmp/cvs-serv6499/examples Modified Files: Tag: RELEASE_1_0 Makefile Log Message: MFC: Added deinstallation rules. Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/examples/Makefile,v retrieving revision 1.4 retrieving revision 1.4.4.1 diff -u -d -r1.4 -r1.4.4.1 --- Makefile 23 Jul 2003 21:16:55 -0000 1.4 +++ Makefile 3 Aug 2003 12:36:53 -0000 1.4.4.1 @@ -8,7 +8,8 @@ DESTDIR=/usr/local POLICIES=*.cb *.cbh *.h -POLICIESDIR=${DESTDIR}/etc/cerb/policies +POLICIESMAINDIR=${DESTDIR}/etc/cerb +POLICIESDIR=${POLICIESMAINDIR}/policies all: cp -f ../kcerb/cerb_globals.h ../kcerb/cerb_types.h . @@ -19,3 +20,36 @@ install: ${POLICIES} install -m 755 -o root -g wheel -d ${POLICIESDIR} install -m 644 -o root -g wheel ${POLICIES} ${POLICIESDIR} + +deinstall: + @if [ -d ${POLICIESDIR} ]; then \ + for policy in ${POLICIES}; do \ + inpolicy=${POLICIESDIR}/$$policy; \ + if [ -f $$inpolicy ]; then \ + if [ "`md5 -q $$policy`" = "`md5 -q $$inpolicy`" ]; then \ + rm -f $$inpolicy; \ + echo "Policy $$inpolicy removed."; \ + else \ + echo "Policy $$inpolicy md5 mismatch, policy will stay."; \ + fi; \ + else \ + echo "Policy $$inpolicy doesn't exist."; \ + fi; \ + done; \ + n=`ls -a ${POLICIESDIR} | wc -l`; \ + if [ $$n -gt 2 ]; then \ + echo "Directory ${POLICIESDIR} isn't empty, so will not be removed."; \ + else \ + rmdir ${POLICIESDIR}; \ + echo "Directory ${POLICIESDIR} removed."; \ + fi; \ + else \ + echo "Directory ${POLICIESDIR} doesn't exist."; \ + fi + @if [ -d ${POLICIESMAINDIR} ]; then \ + n=`ls -a ${POLICIESMAINDIR} | wc -l`; \ + if [ $$n -eq 2 ]; then \ + rmdir ${POLICIESMAINDIR}; \ + echo "Directory ${POLICIESMAINDIR} removed."; \ + fi; \ + fi |
From: <da...@us...> - 2003-08-03 12:36:56
|
Update of /cvsroot/cerber/cerb-ng/docs/pix In directory sc8-pr-cvs1:/tmp/cvs-serv6499/docs/pix Modified Files: Tag: RELEASE_1_0 Makefile Log Message: MFC: Added deinstallation rules. Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/docs/pix/Makefile,v retrieving revision 1.1 retrieving revision 1.1.4.1 diff -u -d -r1.1 -r1.1.4.1 --- Makefile 2 Jul 2003 13:16:56 -0000 1.1 +++ Makefile 3 Aug 2003 12:36:53 -0000 1.1.4.1 @@ -8,7 +8,8 @@ DESTDIR=/usr/local PICS= cerb.gif cerb2.gif cerber.jpg -PICSDIR=${DESTDIR}/share/cerb/pix +PICSMAINDIR=${DESTDIR}/share/cerb +PICSDIR=${PICSMAINDIR}/pix all: @@ -17,3 +18,18 @@ install: ${PICS} install -m 755 -o root -g wheel -d ${PICSDIR} install -m 644 -o root -g wheel ${PICS} ${PICSDIR} + +deinstall: + @if [ -d ${PICSDIR} ]; then \ + rm -rf ${PICSDIR}; \ + echo "Directory ${PICSDIR} removed."; \ + else \ + echo "Directory ${PICSDIR} doesn't exist."; \ + fi + @if [ -d ${PICSMAINDIR} ]; then \ + n=`ls -a ${PICSMAINDIR} | wc -l`; \ + if [ $$n -eq 2 ]; then \ + rmdir ${PICSMAINDIR}; \ + echo "Directory ${PICSMAINDIR} removed."; \ + fi; \ + fi |
From: <da...@us...> - 2003-08-03 12:36:56
|
Update of /cvsroot/cerber/cerb-ng/docs In directory sc8-pr-cvs1:/tmp/cvs-serv6499/docs Modified Files: Tag: RELEASE_1_0 Makefile Log Message: MFC: Added deinstallation rules. Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/docs/Makefile,v retrieving revision 1.1 retrieving revision 1.1.4.1 diff -u -d -r1.1 -r1.1.4.1 --- Makefile 2 Jul 2003 13:16:56 -0000 1.1 +++ Makefile 3 Aug 2003 12:36:53 -0000 1.1.4.1 @@ -9,7 +9,8 @@ DESTDIR=/usr/local DOCS= HOWTO-PL.txt HOWTO.html OPERATIONS-PL.txt README-PL.txt DOCS+= SYSCTLS-PL.txt VARIABLES-PL.txt clang-ref-guide.html rough-guide.html -DOCSDIR=${DESTDIR}/share/cerb/docs +DOCSMAINDIR=${DESTDIR}/share/cerb +DOCSDIR=${DOCSMAINDIR}/docs all: @@ -18,3 +19,18 @@ install: ${DOCS} install -m 755 -o root -g wheel -d ${DOCSDIR} install -m 644 -o root -g wheel ${DOCS} ${DOCSDIR} + +deinstall: + @if [ -d ${DOCSDIR} ]; then \ + rm -rf ${DOCSDIR}; \ + echo "Directory ${DOCSDIR} removed."; \ + else \ + echo "Directory ${DOCSDIR} doesn't exist."; \ + fi + @if [ -d ${DOCSMAINDIR} ]; then \ + n=`ls -a ${DOCSMAINDIR} | wc -l`; \ + if [ $$n -eq 2 ]; then \ + rmdir ${DOCSMAINDIR}; \ + echo "Directory ${DOCSMAINDIR} removed."; \ + fi; \ + fi |
From: <da...@us...> - 2003-08-03 12:35:18
|
Update of /cvsroot/cerber/cerb-ng/ucerb In directory sc8-pr-cvs1:/tmp/cvs-serv5931/ucerb Modified Files: Tag: RELEASE_1_0_RC3 Makefile Log Message: MFC: Added deinstallation rules. Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/ucerb/Makefile,v retrieving revision 1.30 retrieving revision 1.30.2.1 diff -u -d -r1.30 -r1.30.2.1 --- Makefile 2 Jul 2003 13:16:57 -0000 1.30 +++ Makefile 3 Aug 2003 12:35:15 -0000 1.30.2.1 @@ -54,6 +54,9 @@ ../kcerb/cerb_operations.h: cd ../kcerb; $(MAKE) cerb_operations.h +deinstall: + @rm -f ${BINDIR}/${PROG} + @echo Application ${BINDIR}/${PROG} removed. CLEANFILES+=cerb_urules.c cerb_tree.c cerb_operations.c cerb_const.c |
From: <da...@us...> - 2003-08-03 12:35:18
|
Update of /cvsroot/cerber/cerb-ng/test In directory sc8-pr-cvs1:/tmp/cvs-serv5931/test Modified Files: Tag: RELEASE_1_0_RC3 Makefile Log Message: MFC: Added deinstallation rules. Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/test/Makefile,v retrieving revision 1.3 retrieving revision 1.3.4.1 diff -u -d -r1.3 -r1.3.4.1 --- Makefile 21 May 2003 05:38:37 -0000 1.3 +++ Makefile 3 Aug 2003 12:35:14 -0000 1.3.4.1 @@ -10,4 +10,6 @@ install: +deinstall: + .include <bsd.subdir.mk> |
From: <da...@us...> - 2003-08-03 12:35:17
|
Update of /cvsroot/cerber/cerb-ng/examples In directory sc8-pr-cvs1:/tmp/cvs-serv5931/examples Modified Files: Tag: RELEASE_1_0_RC3 Makefile Log Message: MFC: Added deinstallation rules. Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/examples/Makefile,v retrieving revision 1.4 retrieving revision 1.4.2.1 diff -u -d -r1.4 -r1.4.2.1 --- Makefile 23 Jul 2003 21:16:55 -0000 1.4 +++ Makefile 3 Aug 2003 12:35:14 -0000 1.4.2.1 @@ -8,7 +8,8 @@ DESTDIR=/usr/local POLICIES=*.cb *.cbh *.h -POLICIESDIR=${DESTDIR}/etc/cerb/policies +POLICIESMAINDIR=${DESTDIR}/etc/cerb +POLICIESDIR=${POLICIESMAINDIR}/policies all: cp -f ../kcerb/cerb_globals.h ../kcerb/cerb_types.h . @@ -19,3 +20,36 @@ install: ${POLICIES} install -m 755 -o root -g wheel -d ${POLICIESDIR} install -m 644 -o root -g wheel ${POLICIES} ${POLICIESDIR} + +deinstall: + @if [ -d ${POLICIESDIR} ]; then \ + for policy in ${POLICIES}; do \ + inpolicy=${POLICIESDIR}/$$policy; \ + if [ -f $$inpolicy ]; then \ + if [ "`md5 -q $$policy`" = "`md5 -q $$inpolicy`" ]; then \ + rm -f $$inpolicy; \ + echo "Policy $$inpolicy removed."; \ + else \ + echo "Policy $$inpolicy md5 mismatch, policy will stay."; \ + fi; \ + else \ + echo "Policy $$inpolicy doesn't exist."; \ + fi; \ + done; \ + n=`ls -a ${POLICIESDIR} | wc -l`; \ + if [ $$n -gt 2 ]; then \ + echo "Directory ${POLICIESDIR} isn't empty, so will not be removed."; \ + else \ + rmdir ${POLICIESDIR}; \ + echo "Directory ${POLICIESDIR} removed."; \ + fi; \ + else \ + echo "Directory ${POLICIESDIR} doesn't exist."; \ + fi + @if [ -d ${POLICIESMAINDIR} ]; then \ + n=`ls -a ${POLICIESMAINDIR} | wc -l`; \ + if [ $$n -eq 2 ]; then \ + rmdir ${POLICIESMAINDIR}; \ + echo "Directory ${POLICIESMAINDIR} removed."; \ + fi; \ + fi |
From: <da...@us...> - 2003-08-03 12:35:17
|
Update of /cvsroot/cerber/cerb-ng/kcerb In directory sc8-pr-cvs1:/tmp/cvs-serv5931/kcerb Modified Files: Tag: RELEASE_1_0_RC3 Makefile Log Message: MFC: Added deinstallation rules. Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/kcerb/Makefile,v retrieving revision 1.52 retrieving revision 1.52.2.1 diff -u -d -r1.52 -r1.52.2.1 --- Makefile 23 Jul 2003 17:23:57 -0000 1.52 +++ Makefile 3 Aug 2003 12:35:14 -0000 1.52.2.1 @@ -42,6 +42,10 @@ contrib/strlcat.o contrib/strlcpy.o contrib/basename.o contrib/dirname.o: ${.IMPSRC} contrib/libkcerb.h ${CC} ${CFLAGS} -c ${.IMPSRC} -o ${.TARGET} +deinstall: + @rm -f /modules/${KMOD}.ko + @echo Module /modules/${KMOD}.ko removed. + tags: $(SRCS) find $(.CURDIR) -type f -name \*.c -o -name \*.h | xargs ctags -dt @@ -108,11 +112,8 @@ CFLAGS+=-DSMP -DAPIC_IO .BEGIN: @echo - @echo SMP machine detected. Cerb will be compiled with SMP support. - @echo -.END: + @echo SMP machine detected. @echo - @echo Cerb has been compiled with SMP support. .else # WITHOUT_SMP .BEGIN: @echo @@ -126,11 +127,8 @@ .ifndef (WITH_SMP) .BEGIN: @echo - @echo UP machine detected. Cerb will be compiled for UP machine. - @echo -.END: + @echo UP machine detected. @echo - @echo Cerb has been compiled for UP machine. .else # WITH_SMP CFLAGS+=-DSMP -DAPIC_IO .BEGIN: |
From: <da...@us...> - 2003-08-03 12:35:17
|
Update of /cvsroot/cerber/cerb-ng/docs/pix In directory sc8-pr-cvs1:/tmp/cvs-serv5931/docs/pix Modified Files: Tag: RELEASE_1_0_RC3 Makefile Log Message: MFC: Added deinstallation rules. Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/docs/pix/Makefile,v retrieving revision 1.1 retrieving revision 1.1.2.1 diff -u -d -r1.1 -r1.1.2.1 --- Makefile 2 Jul 2003 13:16:56 -0000 1.1 +++ Makefile 3 Aug 2003 12:35:14 -0000 1.1.2.1 @@ -8,7 +8,8 @@ DESTDIR=/usr/local PICS= cerb.gif cerb2.gif cerber.jpg -PICSDIR=${DESTDIR}/share/cerb/pix +PICSMAINDIR=${DESTDIR}/share/cerb +PICSDIR=${PICSMAINDIR}/pix all: @@ -17,3 +18,18 @@ install: ${PICS} install -m 755 -o root -g wheel -d ${PICSDIR} install -m 644 -o root -g wheel ${PICS} ${PICSDIR} + +deinstall: + @if [ -d ${PICSDIR} ]; then \ + rm -rf ${PICSDIR}; \ + echo "Directory ${PICSDIR} removed."; \ + else \ + echo "Directory ${PICSDIR} doesn't exist."; \ + fi + @if [ -d ${PICSMAINDIR} ]; then \ + n=`ls -a ${PICSMAINDIR} | wc -l`; \ + if [ $$n -eq 2 ]; then \ + rmdir ${PICSMAINDIR}; \ + echo "Directory ${PICSMAINDIR} removed."; \ + fi; \ + fi |
From: <da...@us...> - 2003-08-03 12:35:17
|
Update of /cvsroot/cerber/cerb-ng/docs In directory sc8-pr-cvs1:/tmp/cvs-serv5931/docs Modified Files: Tag: RELEASE_1_0_RC3 Makefile Log Message: MFC: Added deinstallation rules. Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/docs/Makefile,v retrieving revision 1.1 retrieving revision 1.1.2.1 diff -u -d -r1.1 -r1.1.2.1 --- Makefile 2 Jul 2003 13:16:56 -0000 1.1 +++ Makefile 3 Aug 2003 12:35:14 -0000 1.1.2.1 @@ -9,7 +9,8 @@ DESTDIR=/usr/local DOCS= HOWTO-PL.txt HOWTO.html OPERATIONS-PL.txt README-PL.txt DOCS+= SYSCTLS-PL.txt VARIABLES-PL.txt clang-ref-guide.html rough-guide.html -DOCSDIR=${DESTDIR}/share/cerb/docs +DOCSMAINDIR=${DESTDIR}/share/cerb +DOCSDIR=${DOCSMAINDIR}/docs all: @@ -18,3 +19,18 @@ install: ${DOCS} install -m 755 -o root -g wheel -d ${DOCSDIR} install -m 644 -o root -g wheel ${DOCS} ${DOCSDIR} + +deinstall: + @if [ -d ${DOCSDIR} ]; then \ + rm -rf ${DOCSDIR}; \ + echo "Directory ${DOCSDIR} removed."; \ + else \ + echo "Directory ${DOCSDIR} doesn't exist."; \ + fi + @if [ -d ${DOCSMAINDIR} ]; then \ + n=`ls -a ${DOCSMAINDIR} | wc -l`; \ + if [ $$n -eq 2 ]; then \ + rmdir ${DOCSMAINDIR}; \ + echo "Directory ${DOCSMAINDIR} removed."; \ + fi; \ + fi |
From: <da...@us...> - 2003-08-03 12:35:17
|
Update of /cvsroot/cerber/cerb-ng In directory sc8-pr-cvs1:/tmp/cvs-serv5931 Modified Files: Tag: RELEASE_1_0_RC3 Makefile Log Message: MFC: Added deinstallation rules. Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/Makefile,v retrieving revision 1.8 retrieving revision 1.8.2.1 diff -u -d -r1.8 -r1.8.2.1 --- Makefile 2 Jul 2003 13:16:56 -0000 1.8 +++ Makefile 3 Aug 2003 12:35:14 -0000 1.8.2.1 @@ -8,6 +8,15 @@ SUBDIR = ucerb kcerb test examples docs docs/pix +deinstall: + @for dir in ${SUBDIR}; do \ + echo "=> Entering $$dir..."; \ + cd $$dir; \ + make deinstall; \ + echo "=> Leaving $$dir..."; \ + cd ..; \ + done + tags: $(SRCS) find $(.CURDIR) -type f -name \*.c -o -name \*.h | xargs ctags -dt |
From: <da...@us...> - 2003-08-03 12:30:12
|
Update of /cvsroot/cerber/cerb-ng/ucerb In directory sc8-pr-cvs1:/tmp/cvs-serv5105/ucerb Modified Files: Makefile Log Message: Added deinstalation rules to Makefiles. Suggested by: Dariusz Kulinski <ta...@ta...> Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/ucerb/Makefile,v retrieving revision 1.30 retrieving revision 1.31 diff -u -d -r1.30 -r1.31 --- Makefile 2 Jul 2003 13:16:57 -0000 1.30 +++ Makefile 3 Aug 2003 12:30:09 -0000 1.31 @@ -54,6 +54,9 @@ ../kcerb/cerb_operations.h: cd ../kcerb; $(MAKE) cerb_operations.h +deinstall: + @rm -f ${BINDIR}/${PROG} + @echo Application ${BINDIR}/${PROG} removed. CLEANFILES+=cerb_urules.c cerb_tree.c cerb_operations.c cerb_const.c |
From: <da...@us...> - 2003-08-03 12:30:12
|
Update of /cvsroot/cerber/cerb-ng/test In directory sc8-pr-cvs1:/tmp/cvs-serv5105/test Modified Files: Makefile Log Message: Added deinstalation rules to Makefiles. Suggested by: Dariusz Kulinski <ta...@ta...> Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/test/Makefile,v retrieving revision 1.3 retrieving revision 1.4 diff -u -d -r1.3 -r1.4 --- Makefile 21 May 2003 05:38:37 -0000 1.3 +++ Makefile 3 Aug 2003 12:30:09 -0000 1.4 @@ -10,4 +10,6 @@ install: +deinstall: + .include <bsd.subdir.mk> |
From: <da...@us...> - 2003-08-03 12:30:12
|
Update of /cvsroot/cerber/cerb-ng/kcerb In directory sc8-pr-cvs1:/tmp/cvs-serv5105/kcerb Modified Files: Makefile Log Message: Added deinstalation rules to Makefiles. Suggested by: Dariusz Kulinski <ta...@ta...> Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/kcerb/Makefile,v retrieving revision 1.52 retrieving revision 1.53 diff -u -d -r1.52 -r1.53 --- Makefile 23 Jul 2003 17:23:57 -0000 1.52 +++ Makefile 3 Aug 2003 12:30:08 -0000 1.53 @@ -42,6 +42,10 @@ contrib/strlcat.o contrib/strlcpy.o contrib/basename.o contrib/dirname.o: ${.IMPSRC} contrib/libkcerb.h ${CC} ${CFLAGS} -c ${.IMPSRC} -o ${.TARGET} +deinstall: + @rm -f /modules/${KMOD}.ko + @echo Module /modules/${KMOD}.ko removed. + tags: $(SRCS) find $(.CURDIR) -type f -name \*.c -o -name \*.h | xargs ctags -dt @@ -108,11 +112,8 @@ CFLAGS+=-DSMP -DAPIC_IO .BEGIN: @echo - @echo SMP machine detected. Cerb will be compiled with SMP support. - @echo -.END: + @echo SMP machine detected. @echo - @echo Cerb has been compiled with SMP support. .else # WITHOUT_SMP .BEGIN: @echo @@ -126,11 +127,8 @@ .ifndef (WITH_SMP) .BEGIN: @echo - @echo UP machine detected. Cerb will be compiled for UP machine. - @echo -.END: + @echo UP machine detected. @echo - @echo Cerb has been compiled for UP machine. .else # WITH_SMP CFLAGS+=-DSMP -DAPIC_IO .BEGIN: |
From: <da...@us...> - 2003-08-03 12:30:12
|
Update of /cvsroot/cerber/cerb-ng/examples In directory sc8-pr-cvs1:/tmp/cvs-serv5105/examples Modified Files: Makefile Log Message: Added deinstalation rules to Makefiles. Suggested by: Dariusz Kulinski <ta...@ta...> Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/examples/Makefile,v retrieving revision 1.4 retrieving revision 1.5 diff -u -d -r1.4 -r1.5 --- Makefile 23 Jul 2003 21:16:55 -0000 1.4 +++ Makefile 3 Aug 2003 12:30:08 -0000 1.5 @@ -8,7 +8,8 @@ DESTDIR=/usr/local POLICIES=*.cb *.cbh *.h -POLICIESDIR=${DESTDIR}/etc/cerb/policies +POLICIESMAINDIR=${DESTDIR}/etc/cerb +POLICIESDIR=${POLICIESMAINDIR}/policies all: cp -f ../kcerb/cerb_globals.h ../kcerb/cerb_types.h . @@ -19,3 +20,36 @@ install: ${POLICIES} install -m 755 -o root -g wheel -d ${POLICIESDIR} install -m 644 -o root -g wheel ${POLICIES} ${POLICIESDIR} + +deinstall: + @if [ -d ${POLICIESDIR} ]; then \ + for policy in ${POLICIES}; do \ + inpolicy=${POLICIESDIR}/$$policy; \ + if [ -f $$inpolicy ]; then \ + if [ "`md5 -q $$policy`" = "`md5 -q $$inpolicy`" ]; then \ + rm -f $$inpolicy; \ + echo "Policy $$inpolicy removed."; \ + else \ + echo "Policy $$inpolicy md5 mismatch, policy will stay."; \ + fi; \ + else \ + echo "Policy $$inpolicy doesn't exist."; \ + fi; \ + done; \ + n=`ls -a ${POLICIESDIR} | wc -l`; \ + if [ $$n -gt 2 ]; then \ + echo "Directory ${POLICIESDIR} isn't empty, so will not be removed."; \ + else \ + rmdir ${POLICIESDIR}; \ + echo "Directory ${POLICIESDIR} removed."; \ + fi; \ + else \ + echo "Directory ${POLICIESDIR} doesn't exist."; \ + fi + @if [ -d ${POLICIESMAINDIR} ]; then \ + n=`ls -a ${POLICIESMAINDIR} | wc -l`; \ + if [ $$n -eq 2 ]; then \ + rmdir ${POLICIESMAINDIR}; \ + echo "Directory ${POLICIESMAINDIR} removed."; \ + fi; \ + fi |
From: <da...@us...> - 2003-08-03 12:30:11
|
Update of /cvsroot/cerber/cerb-ng/docs/pix In directory sc8-pr-cvs1:/tmp/cvs-serv5105/docs/pix Modified Files: Makefile Log Message: Added deinstalation rules to Makefiles. Suggested by: Dariusz Kulinski <ta...@ta...> Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/docs/pix/Makefile,v retrieving revision 1.1 retrieving revision 1.2 diff -u -d -r1.1 -r1.2 --- Makefile 2 Jul 2003 13:16:56 -0000 1.1 +++ Makefile 3 Aug 2003 12:30:08 -0000 1.2 @@ -8,7 +8,8 @@ DESTDIR=/usr/local PICS= cerb.gif cerb2.gif cerber.jpg -PICSDIR=${DESTDIR}/share/cerb/pix +PICSMAINDIR=${DESTDIR}/share/cerb +PICSDIR=${PICSMAINDIR}/pix all: @@ -17,3 +18,18 @@ install: ${PICS} install -m 755 -o root -g wheel -d ${PICSDIR} install -m 644 -o root -g wheel ${PICS} ${PICSDIR} + +deinstall: + @if [ -d ${PICSDIR} ]; then \ + rm -rf ${PICSDIR}; \ + echo "Directory ${PICSDIR} removed."; \ + else \ + echo "Directory ${PICSDIR} doesn't exist."; \ + fi + @if [ -d ${PICSMAINDIR} ]; then \ + n=`ls -a ${PICSMAINDIR} | wc -l`; \ + if [ $$n -eq 2 ]; then \ + rmdir ${PICSMAINDIR}; \ + echo "Directory ${PICSMAINDIR} removed."; \ + fi; \ + fi |
From: <da...@us...> - 2003-08-03 12:30:10
|
Update of /cvsroot/cerber/cerb-ng/docs In directory sc8-pr-cvs1:/tmp/cvs-serv5105/docs Modified Files: Makefile Log Message: Added deinstalation rules to Makefiles. Suggested by: Dariusz Kulinski <ta...@ta...> Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/docs/Makefile,v retrieving revision 1.1 retrieving revision 1.2 diff -u -d -r1.1 -r1.2 --- Makefile 2 Jul 2003 13:16:56 -0000 1.1 +++ Makefile 3 Aug 2003 12:30:07 -0000 1.2 @@ -9,7 +9,8 @@ DESTDIR=/usr/local DOCS= HOWTO-PL.txt HOWTO.html OPERATIONS-PL.txt README-PL.txt DOCS+= SYSCTLS-PL.txt VARIABLES-PL.txt clang-ref-guide.html rough-guide.html -DOCSDIR=${DESTDIR}/share/cerb/docs +DOCSMAINDIR=${DESTDIR}/share/cerb +DOCSDIR=${DOCSMAINDIR}/docs all: @@ -18,3 +19,18 @@ install: ${DOCS} install -m 755 -o root -g wheel -d ${DOCSDIR} install -m 644 -o root -g wheel ${DOCS} ${DOCSDIR} + +deinstall: + @if [ -d ${DOCSDIR} ]; then \ + rm -rf ${DOCSDIR}; \ + echo "Directory ${DOCSDIR} removed."; \ + else \ + echo "Directory ${DOCSDIR} doesn't exist."; \ + fi + @if [ -d ${DOCSMAINDIR} ]; then \ + n=`ls -a ${DOCSMAINDIR} | wc -l`; \ + if [ $$n -eq 2 ]; then \ + rmdir ${DOCSMAINDIR}; \ + echo "Directory ${DOCSMAINDIR} removed."; \ + fi; \ + fi |
From: <da...@us...> - 2003-08-03 12:30:10
|
Update of /cvsroot/cerber/cerb-ng In directory sc8-pr-cvs1:/tmp/cvs-serv5105 Modified Files: Makefile Log Message: Added deinstalation rules to Makefiles. Suggested by: Dariusz Kulinski <ta...@ta...> Index: Makefile =================================================================== RCS file: /cvsroot/cerber/cerb-ng/Makefile,v retrieving revision 1.8 retrieving revision 1.9 diff -u -d -r1.8 -r1.9 --- Makefile 2 Jul 2003 13:16:56 -0000 1.8 +++ Makefile 3 Aug 2003 12:30:06 -0000 1.9 @@ -8,6 +8,15 @@ SUBDIR = ucerb kcerb test examples docs docs/pix +deinstall: + @for dir in ${SUBDIR}; do \ + echo "=> Entering $$dir..."; \ + cd $$dir; \ + make deinstall; \ + echo "=> Leaving $$dir..."; \ + cd ..; \ + done + tags: $(SRCS) find $(.CURDIR) -type f -name \*.c -o -name \*.h | xargs ctags -dt |
From: <da...@us...> - 2003-08-02 17:13:06
|
Update of /cvsroot/cerber/cerb-ng/kcerb In directory sc8-pr-cvs1:/tmp/cvs-serv16503 Modified Files: Tag: RELEASE_1_0_RC3 cerb_globals.h cerb_usmalloc.c Log Message: MFC: Non-invariants case fix. Index: cerb_globals.h =================================================================== RCS file: /cvsroot/cerber/cerb-ng/kcerb/cerb_globals.h,v retrieving revision 1.71.2.1 retrieving revision 1.71.2.2 diff -u -d -r1.71.2.1 -r1.71.2.2 --- cerb_globals.h 2 Aug 2003 16:52:58 -0000 1.71.2.1 +++ cerb_globals.h 2 Aug 2003 17:13:03 -0000 1.71.2.2 @@ -122,6 +122,6 @@ #undef CB_DEBUG_SAFEMALLOC /* debug for safe malloc() */ /* Invariants. */ -#define CB_INVARIANTS +#define CB_INVARIANTS #endif /* _CERB_GLOBALS_H_ */ Index: cerb_usmalloc.c =================================================================== RCS file: /cvsroot/cerber/cerb-ng/kcerb/cerb_usmalloc.c,v retrieving revision 1.17 retrieving revision 1.17.2.1 diff -u -d -r1.17 -r1.17.2.1 --- cerb_usmalloc.c 22 Jul 2003 00:13:32 -0000 1.17 +++ cerb_usmalloc.c 2 Aug 2003 17:13:03 -0000 1.17.2.1 @@ -205,8 +205,12 @@ end = (vm_offset_t)dst + size; vm_map_lock(map); +#ifdef CB_INVARIANTS if (!vm_map_lookup_entry(map, start, &entry)) - MCB_ASSERT(0, "Cannot find entry?"); + MCB_ASSERT(error == 0, "Cannot find entry?"); +#else + vm_map_lookup_entry(map, start, &entry); +#endif fcb_usm_entry_prot(th, entry, VM_PROT_ALL); vm_map_unlock(map); #ifdef CB_DEBUG_USM @@ -291,8 +295,12 @@ if (rv != KERN_SUCCESS) return (ENOMEM); if (nentries != map->nentries) { +#ifdef CB_INVARIANTS if (!vm_map_lookup_entry(map, old, &entry)) MCB_ASSERT(0, "Cannot find entry?"); +#else + vm_map_lookup_entry(map, old, &entry); +#endif fcb_usm_entry_prot(th, entry, VM_PROT_READ); } vm->vm_dsize += btoc(diff); |
From: <da...@us...> - 2003-08-02 17:11:05
|
Update of /cvsroot/cerber/cerb-ng/kcerb In directory sc8-pr-cvs1:/tmp/cvs-serv16042 Modified Files: Tag: RELEASE_1_0 cerb_globals.h cerb_usmalloc.c Log Message: - MFC fix for non-invariants case. - Turn off invariants for 1.0 by default. - Turn off safe_malloc for 1.0 by default. Index: cerb_globals.h =================================================================== RCS file: /cvsroot/cerber/cerb-ng/kcerb/cerb_globals.h,v retrieving revision 1.71.4.1 retrieving revision 1.71.4.2 diff -u -d -r1.71.4.1 -r1.71.4.2 --- cerb_globals.h 2 Aug 2003 16:53:30 -0000 1.71.4.1 +++ cerb_globals.h 2 Aug 2003 17:11:02 -0000 1.71.4.2 @@ -97,7 +97,7 @@ }; /* Features: */ -#define CERB_SAFEMALLOC +#undef CERB_SAFEMALLOC #define CERB_TRACE #define CERB_INITRUN #define CERB_USERSYSCTL @@ -114,7 +114,6 @@ #undef CB_DEBUG_THREAD /* debug for threads */ #undef CB_DEBUG_USM /* debug for memory allocations in userland */ #undef CB_DEBUG_ASK /* debug for ask mechanism */ -#define CB_DEBUG_ASK #undef CB_DEBUG_USERSYSCTL /* debug for user sysctl functions */ #undef CB_DEBUG_PRISON /* debug for actions on jails */ #undef CB_DEBUG_GETVAL /* debug for fcb_getval() function */ @@ -122,6 +121,6 @@ #undef CB_DEBUG_SAFEMALLOC /* debug for safe malloc() */ /* Invariants. */ -#define CB_INVARIANTS +#undef CB_INVARIANTS #endif /* _CERB_GLOBALS_H_ */ Index: cerb_usmalloc.c =================================================================== RCS file: /cvsroot/cerber/cerb-ng/kcerb/cerb_usmalloc.c,v retrieving revision 1.17 retrieving revision 1.17.4.1 diff -u -d -r1.17 -r1.17.4.1 --- cerb_usmalloc.c 22 Jul 2003 00:13:32 -0000 1.17 +++ cerb_usmalloc.c 2 Aug 2003 17:11:02 -0000 1.17.4.1 @@ -205,8 +205,12 @@ end = (vm_offset_t)dst + size; vm_map_lock(map); +#ifdef CB_INVARIANTS if (!vm_map_lookup_entry(map, start, &entry)) - MCB_ASSERT(0, "Cannot find entry?"); + MCB_ASSERT(error == 0, "Cannot find entry?"); +#else + vm_map_lookup_entry(map, start, &entry); +#endif fcb_usm_entry_prot(th, entry, VM_PROT_ALL); vm_map_unlock(map); #ifdef CB_DEBUG_USM @@ -291,8 +295,12 @@ if (rv != KERN_SUCCESS) return (ENOMEM); if (nentries != map->nentries) { +#ifdef CB_INVARIANTS if (!vm_map_lookup_entry(map, old, &entry)) MCB_ASSERT(0, "Cannot find entry?"); +#else + vm_map_lookup_entry(map, old, &entry); +#endif fcb_usm_entry_prot(th, entry, VM_PROT_READ); } vm->vm_dsize += btoc(diff); |
From: <da...@us...> - 2003-08-02 17:05:16
|
Update of /cvsroot/cerber/cerb-ng/kcerb In directory sc8-pr-cvs1:/tmp/cvs-serv15006 Modified Files: cerb_globals.h cerb_usmalloc.c Log Message: - Fixed non-invariants case. - Style fix. Index: cerb_globals.h =================================================================== RCS file: /cvsroot/cerber/cerb-ng/kcerb/cerb_globals.h,v retrieving revision 1.71 retrieving revision 1.72 diff -u -d -r1.71 -r1.72 --- cerb_globals.h 23 Jul 2003 18:04:02 -0000 1.71 +++ cerb_globals.h 2 Aug 2003 17:05:13 -0000 1.72 @@ -122,6 +122,6 @@ #undef CB_DEBUG_SAFEMALLOC /* debug for safe malloc() */ /* Invariants. */ -#define CB_INVARIANTS +#define CB_INVARIANTS #endif /* _CERB_GLOBALS_H_ */ Index: cerb_usmalloc.c =================================================================== RCS file: /cvsroot/cerber/cerb-ng/kcerb/cerb_usmalloc.c,v retrieving revision 1.17 retrieving revision 1.18 diff -u -d -r1.17 -r1.18 --- cerb_usmalloc.c 22 Jul 2003 00:13:32 -0000 1.17 +++ cerb_usmalloc.c 2 Aug 2003 17:05:13 -0000 1.18 @@ -205,8 +205,12 @@ end = (vm_offset_t)dst + size; vm_map_lock(map); +#ifdef CB_INVARIANTS if (!vm_map_lookup_entry(map, start, &entry)) - MCB_ASSERT(0, "Cannot find entry?"); + MCB_ASSERT(error == 0, "Cannot find entry?"); +#else + vm_map_lookup_entry(map, start, &entry); +#endif fcb_usm_entry_prot(th, entry, VM_PROT_ALL); vm_map_unlock(map); #ifdef CB_DEBUG_USM @@ -291,8 +295,12 @@ if (rv != KERN_SUCCESS) return (ENOMEM); if (nentries != map->nentries) { +#ifdef CB_INVARIANTS if (!vm_map_lookup_entry(map, old, &entry)) MCB_ASSERT(0, "Cannot find entry?"); +#else + vm_map_lookup_entry(map, old, &entry); +#endif fcb_usm_entry_prot(th, entry, VM_PROT_READ); } vm->vm_dsize += btoc(diff); |
From: <da...@us...> - 2003-08-02 16:57:24
|
Update of /cvsroot/cerber/cerb-ng/docs In directory sc8-pr-cvs1:/tmp/cvs-serv13912 Modified Files: Tag: RELEASE_1_0 HOWTO-PL.txt Log Message: Documentation update. Index: HOWTO-PL.txt =================================================================== RCS file: /cvsroot/cerber/cerb-ng/docs/HOWTO-PL.txt,v retrieving revision 1.18 retrieving revision 1.18.4.1 diff -u -d -r1.18 -r1.18.4.1 --- HOWTO-PL.txt 2 Jul 2003 13:16:56 -0000 1.18 +++ HOWTO-PL.txt 2 Aug 2003 16:57:21 -0000 1.18.4.1 @@ -19,12 +19,6 @@ $Id$ -------------------------------------------------------------------------------- -Masz przed sob± wersjê testow± CerbNG. B³êdów zapewne jest sporo, wiêc -bêdziemy niezmiernie wdzieczni za pomoc w ich znalezieniu, gdy¿ stabilno¶æ -cerba to jeden z g³ównych warunków jakie musi spe³niaæ. -Ze wzglêdu jednak na ten stan rzeczy chorym pomys³em jest uruchamianie -aktualniej wersji cerba na maszynie produkcyjnej. - CerbNG sk³ada siê z dwóch zasadniczych czê¶ci: modu³u i kompilatora regu³. Kompilacja i instalacja jest prosta, nale¿y wykonaæ: |
From: <da...@us...> - 2003-08-02 16:53:33
|
Update of /cvsroot/cerber/cerb-ng/kcerb In directory sc8-pr-cvs1:/tmp/cvs-serv13453 Modified Files: Tag: RELEASE_1_0 cerb_globals.h Log Message: Update version. Index: cerb_globals.h =================================================================== RCS file: /cvsroot/cerber/cerb-ng/kcerb/cerb_globals.h,v retrieving revision 1.71 retrieving revision 1.71.4.1 diff -u -d -r1.71 -r1.71.4.1 --- cerb_globals.h 23 Jul 2003 18:04:02 -0000 1.71 +++ cerb_globals.h 2 Aug 2003 16:53:30 -0000 1.71.4.1 @@ -14,7 +14,7 @@ #include "cerb_types.h" -#define CB_VERSION_G "CURRENT" /* CerbNG version. */ +#define CB_VERSION_G "v1.0" /* CerbNG version. */ #define CERB_VERSION 2003070401 #define CB_NREGS_G 50 /* How many registers (in rules) |
From: <da...@us...> - 2003-08-02 16:53:01
|
Update of /cvsroot/cerber/cerb-ng/kcerb In directory sc8-pr-cvs1:/tmp/cvs-serv13368 Modified Files: Tag: RELEASE_1_0_RC3 cerb_globals.h Log Message: Update version. Index: cerb_globals.h =================================================================== RCS file: /cvsroot/cerber/cerb-ng/kcerb/cerb_globals.h,v retrieving revision 1.71 retrieving revision 1.71.2.1 diff -u -d -r1.71 -r1.71.2.1 --- cerb_globals.h 23 Jul 2003 18:04:02 -0000 1.71 +++ cerb_globals.h 2 Aug 2003 16:52:58 -0000 1.71.2.1 @@ -14,7 +14,7 @@ #include "cerb_types.h" -#define CB_VERSION_G "CURRENT" /* CerbNG version. */ +#define CB_VERSION_G "v1.0-RC3" /* CerbNG version. */ #define CERB_VERSION 2003070401 #define CB_NREGS_G 50 /* How many registers (in rules) |
From: <da...@us...> - 2003-08-02 16:33:56
|
Update of /cvsroot/cerber/cerb-ng/docs In directory sc8-pr-cvs1:/tmp/cvs-serv10844 Modified Files: OPERATIONS-PL.txt Log Message: Docs cleanups. Index: OPERATIONS-PL.txt =================================================================== RCS file: /cvsroot/cerber/cerb-ng/docs/OPERATIONS-PL.txt,v retrieving revision 1.37 retrieving revision 1.38 diff -u -d -r1.37 -r1.38 --- OPERATIONS-PL.txt 16 Jul 2003 06:30:14 -0000 1.37 +++ OPERATIONS-PL.txt 2 Aug 2003 16:33:53 -0000 1.38 @@ -171,6 +171,7 @@ return(call()); } Przyk³ad trochê dziwny, ale oddaje ideê. + NOTE: O wiele bardziej uniwersaln± operacj± jest scall(). RETURN: Numer syscalla przed zmian±. DOC: syscall(2) @@ -983,6 +984,8 @@ w jailu) Je¶li argument ,,flags'' nie zosta³ podany przyjmowana jest warto¶æ: (CTLFLAG_RW | CTLFLAG_SECURE). + Do sysctla wpisywana jest automatycznie warto¶æ argumentu + ,,init'', je¶li zosta³ podany. RETURN: 0 je¶li wszystko siê powiod³o lub numer b³êdu. DOC: sysctl(3), sysctl(8), SYSCTL_ADD_OID(9). NOTE: Sysctle mo¿na usuwaæ z wykorzystaniem operacji rmsysctl() lub @@ -1243,8 +1246,8 @@ --- regu³a nie zosta³a wykonana, [X] ostatnia komenda (czyli zapewne trace()). RETURN: Zawsze zwraca 0. - NOTE: Trace musi byæ wkompilowany, czyli w pliku cerb_globals.h musi - znajdowaæ siê linia: + NOTE: Mechanizm trace musi byæ wkompilowany, czyli w pliku + cerb_globals.h musi znajdowaæ siê linia: #define CERB_TRACE W przypadku b³êdów CONFERR, trace wy¶wietlany jest automatycznie. @@ -1263,7 +1266,7 @@ RETURN: W zale¿no¶ci od typu argumentu zwracane jest co nastêpuje: CB_DEF_T, CB_UDEF_T - zawsze zero, CB_DEFPTR_T, CB_UDEFPTR_T, CB_STRPTR_T - ilo¶æ elementów - w tablicy, + w tablicy, CB_STR_T - d³ugo¶æ stringu, ... CONFERR: @@ -1281,7 +1284,7 @@ STR:dirname(<STR:path>) DESC: Funkcja usuwa ostatni komponent podanej ¶cie¿ki. RETURN: Wygenerowany ci±g. - DOC: basename(1), basename(3) + DOC: dirname(1), dirname(3) NOTE: Funkcja dzia³a identycznie jak dirname(3). CONFERR: EINVAL - Niepoprawna liczba argumentów lub ich typy. |
From: <da...@us...> - 2003-08-02 16:32:42
|
Update of /cvsroot/cerber/cerb-ng In directory sc8-pr-cvs1:/tmp/cvs-serv10709 Modified Files: INSTALL Log Message: Instalation process is described in HOWTO.html file. Index: INSTALL =================================================================== RCS file: /cvsroot/cerber/cerb-ng/INSTALL,v retrieving revision 1.2 retrieving revision 1.3 diff -u -d -r1.2 -r1.3 --- INSTALL 21 Mar 2003 09:40:06 -0000 1.2 +++ INSTALL 2 Aug 2003 16:32:38 -0000 1.3 @@ -1,159 +1 @@ - CerbNG Installation Guide - - This is the first generally available, test version of CerbNG. There are - many bugs yet, that's for sure. We would be grateful for helping us find - them, since stability and security of CerbNG are our main concerns. - Because of current state of CerbNG, deploying it on a production machine - is a twisted idea. - - Let's get started with building and installing Cerb: - - # cd <path to cerb sources> - # make clean all install - - If everything went as expected, we are ready to load the module into - running kernel. After installation you can find cerb.ko in standard - directory for modules: /modules. Let's load the module: - - # kldload cerb - - Line like "CerbNG vX.Y loaded" should appear in the logs. After loading - the module, Cerb specific sysctls should be present in the system. One can - list them running: - - # sysctl cerb - - Unless you are sure, that Cerb is running fine on your system, you should - run the regression test suite. You can do with following sequence of - commands: - - # cd /path/to/cerb-ng/test - # make - # ./test.sh - - The tests will check most parts of the kernel module and the compiler - (cbctl). Two phases of tests will be run: kcerb-test and recompile. Checks - performed during kcerb-test are critical. If any of them fails, you should - definitely turn off Cerb, and send all test results to Cerb developers. - There is a danger of causing kernel panic if you proceed despite failure - of the tests. Tests performed during recompile are not critical. Their - failure might indicate a bug under some specific circumstances. But yes - - any bugs cropping up during this phase, tell you that you can be unable to - compile your rules. In this case also, please send us feedback on your - findings. - - Time for loading the rules. Two groups should be created first. Let's do - it: - - # pw group add exec -g 666 - # pw group add debug -g 667 - - Now let's compile and load the rules: - - # cd <path to cerb>/ucerb - # ./cbctl -f ../examples/main.cb - - File main.cb loads most example policies you can find in the examples - directory, ie.: - - noexec-by-group.cb, openssh.cb, passwd.cb, ping.cb, su.cb, - degrade-unknown-sugids.cb, restricted-debug.cb, restricted-link.cb, - log-exec.cb - - Short description of selected policies: - - openssh.cb - Controls sshd(8) (if sshd is running when the policy is being - loaded, it has to be restarted). The policy degrades sshd - privileges after it's been started to UID and GID for user/group - sshd. CerbNG elevates sshd rights for performing privileged - operations. - - passwd.cb - Controls passwd(1). Similarly to openssh.cb privileges of the - passwd process are changed to those of user running this program. - Privileges are degraded regardless of the setuid bit. - - ping.cb, su.cb - Similar privilege degradation examples. - - noexec-by-group.cb - Noexec for all users but root and members of exec group. - Additionally environment variables with names beginning with LD_ - are verified. - - degrade-unknown-sugids.cb - All setuid/setgid files, which are not controlled by Cerb are - denied elevated privileges and run with credentials of user - performing the execve(2) syscall. - - restricted-debug.cb - Using ptrace(2) and ktrace(2) syscalls will be limited to root - user and members of group debug. - - restricted-link.cb - Non-root users will be denied the right to create hard links to - other users' files. - - log-exec.cb - All execve(2) calls performed by non-privileged users will be - logged. - - Loaded rules can by listed by: - - # sysctl cerb.syscalls.show=<slot number> - - If we load the rules using cbctl, they are placed by default in slot - number 0. One can change it using option -r for cbctl. There are 3 slots - by default. This value is defined in kcerb/cerb_globals.h as CB_MAXTABS_G. - - If rules are loaded into several slots, they can be switched on the fly - by: - - # sysctl cerb.rules.set=<new active slot number> - - To test correctness of the rule file, or just list the rules to check how - the compiler sees them (options -l and -t), one should use option -n for - cbctl. - - Loading rules to slot causes overwriting of the rules present in the slot. - To remove rules from a slot, run: - - # sysctl cerb.rules.rm=<slot number> - - To freeze Cerb rule state, ie. prevent new rules from loading, switching - active slots etc, set sysctl cerb.rules.lock to 1. After this sysctl is - set to 1, it cannot be reset back to 0 without system restart. - - Creating Cerb rules securing critical applications we started from the - only sensible point of degrading all credentials and rising them only for - executing possibly shortest slices of privileged operations. Additionally - every context when privileges are elevated, is logged by default. Because - of the above assumption one can intercept only those syscalls which are - used by the application, possibly improving overall system performance. - - Also by default (it's still a test version of Cerb) sysctl - cerb.misc.off_on_error is set to 1, which means, that when an runtime - error is encountered Cerb is automatically disabled. In production - environment, this sysctl should be set to 0, which causes return of error - value to userland when such error is found. It stops circumventing Cerb - protections by playing with syscalls which are mishandled by Cerb. - Additionally Cerb using trace mechanism will list erroneous rule when such - an error is found. - - Because this is still a test version, sysctl cerb.misc.off_on_error is set - to 1, which makes Cerb unload when a runtime error is encountered. In - production environment this sysctl should be set to 0, to prevent messing - with the rules to find an error condition in the rules and subsequently - circumvent Cerb protections. On error Cerb will display rule containing - the error when it occurs using trace() mechanism. - - When preparing custom rules for Cerb, one should use helpful macro - CB_PREPARE(), defined in addons.cbh, which can display all syscall - arguments using %A format character. Moreover this macro exploits Tomasz - Pilat's idea, which was running the syscall with degraded credentials and - when it fails, restarting it with UID = 0. If it succeeds then, - appropriate message is logged. It doesn't solve all the problems. Programs - often rely on values returned by syscalls for checking their rights (like - getuid(2)), which in such scenarios are best intercepted and rewritten to - return 0 value. +See docs/HOWTO.html. |