Menu
▾
▴
trustees-general — General discussion, questions, and announcements for trustees.
You can subscribe to this list here.
| 2005 |
Jan
|
Feb
|
Mar
|
Apr
(9) |
May
(6) |
Jun
(3) |
Jul
(15) |
Aug
(8) |
Sep
(4) |
Oct
|
Nov
(3) |
Dec
(3) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2006 |
Jan
(8) |
Feb
(3) |
Mar
(2) |
Apr
(1) |
May
(3) |
Jun
(2) |
Jul
(4) |
Aug
(3) |
Sep
|
Oct
(7) |
Nov
(2) |
Dec
(19) |
| 2007 |
Jan
(7) |
Feb
(4) |
Mar
(1) |
Apr
|
May
|
Jun
(2) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
(2) |
| 2009 |
Jan
|
Feb
|
Mar
|
Apr
(3) |
May
|
Jun
(2) |
Jul
(2) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2011 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
(1) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: Hubert T. <zu...@fr...> - 2005-08-23 15:09:48
|
> On Tue, Aug 23, 2005 at 12:11:44PM +0200, Hubert TOUVET wrote: >> File/new from windows explorer works in samba share \\backup-sth\test >> backup-sth:/home/test# ls -al >> total 8 >> drwxr-sr-x 2 root staff 4096 2005-08-23 12:03 . >> drwxrwsr-x 17 root staff 4096 2005-08-23 11:27 .. >> -rwxrw---- 1 33 staff 0 2005-08-23 12:03 Nouveau Texte >> seulement.txt >> backup-sth:/home/test# >> >> But renaming this file with windows explorer raises an error : >> unable to rename Nouveau Texte seulement.txt : Access denied > > Very interesting. Happen to know off hand if the same behavior happens > from the unix client? > > - Andy > > -- > Andrew Ruder <ae...@ks...> > http://www.aeruder.net > > With a linux smbmount, it works... "mv" a file on a mounted samba filesystem with trustees works... Note that saving an Excel file gives the same problem as renaming with Windows Explorer. The orginal filename is lost, only a temporary filename remains (perhaps excel creates a temporary file, deletes the old one, and then tries to rename the temporary file with the correct filename...) Hubert TOUVET. |
|
From: Andrew R. <ae...@ks...> - 2005-08-23 12:18:58
|
On Tue, Aug 23, 2005 at 12:11:44PM +0200, Hubert TOUVET wrote: > File/new from windows explorer works in samba share \\backup-sth\test > backup-sth:/home/test# ls -al > total 8 > drwxr-sr-x 2 root staff 4096 2005-08-23 12:03 . > drwxrwsr-x 17 root staff 4096 2005-08-23 11:27 .. > -rwxrw---- 1 33 staff 0 2005-08-23 12:03 Nouveau Texte seulement.txt > backup-sth:/home/test# > > But renaming this file with windows explorer raises an error : > unable to rename Nouveau Texte seulement.txt : Access denied Very interesting. Happen to know off hand if the same behavior happens from the unix client? - Andy -- Andrew Ruder <ae...@ks...> http://www.aeruder.net |
|
From: Hubert T. <zu...@fr...> - 2005-08-23 10:13:04
|
Hello,
With last trustees trunk,
if rights are given by trustees module, renaming a file through samba
from a windows workstation doesn't work.
(Create/delete FILES works. Modify the file works.
Create/Delete/Rename DIRECTORIES works.
Renaming files when rights are given by unix rights works
Renaming file from bash mith mv works)
Directory :
drwxr-sr-x 3 root staff 4096 2005-08-23 11:52 test
Trustees conf :
/etc/trustees.conf
# Partition /home
[/dev/hda6]/test:+development:RWEBX
User is 33 belonging to group development
backup-sth:/home$ id
uid=1620(33) gid=100(users)
groupes=100(users),2006(development),2025(quotation),2027(management)
Samba share :
/etc/samba/smb.conf
...
[test]
comment = test
path = /home/test
public = no
writeable = yes
create mask = 0770
....
File/new from windows explorer works in samba share \\backup-sth\test
backup-sth:/home/test# ls -al
total 8
drwxr-sr-x 2 root staff 4096 2005-08-23 12:03 .
drwxrwsr-x 17 root staff 4096 2005-08-23 11:27 ..
-rwxrw---- 1 33 staff 0 2005-08-23 12:03 Nouveau Texte seulement.txt
backup-sth:/home/test#
But renaming this file with windows explorer raises an error :
unable to rename Nouveau Texte seulement.txt : Access denied
Any idea ??
--
Hubert TOUVET
Resp. Syst. Informations
SERMO
Member of ARRK Group
Tel +33 (0)2 51 43 06 55
Fax +33 (0)2 51 48 94 15
|
|
From: Hubert T. <zu...@fr...> - 2005-08-17 17:14:27
|
ae...@ks... wrote: >Quoting Heiko Noordhof <hei...@xs...>: > > > >>However, when statically linked into the kernel, it seems to work. >>But >>I'd like to be able to unload the module to be able to create >>hardlinks. >> >> > >I've recently found out that in the early startup of Debian (in the >initrd) the capabilities module is loaded. Unfortunately, until the >security module stacking code makes it into mainline kernel (allowing >multiple security modules), this will disallow trustees from loading. >Since the loading is done so early, it is rather difficult to load the >trustees module prior to the capabilities module, which is why you are >running into problems. You can perhaps rmmod the capabilities module >and load the trustees module instead. > >Also, as root you should always be able to create hard links fine. > >Also, in the latest subversion, I have code to allow hard links between >directories under the same trustee object. That way if you have a >trustee object(s) for /home, your users would be free to create hard >links to/from files within their home directories (even into different >directories under /home). I will admit, though, I have received very >little feedback on this new feature. It seems to work for me, but I've >been unable to test it fully yet so your mileage may vary. > > >Thanks, >Andrew Ruder > >P.S. The capability module is called "capability" or "commoncap" if >you want to try the rmmod approach. > >-- >Andrew E. Ruder <ae...@ks...> >http://www.aeruder.net > > > >------------------------------------------------------- >SF.Net email is Sponsored by the Better Software Conference & EXPO >September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices >Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA >Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf >_______________________________________________ >trustees-general mailing list >tru...@li... >https://lists.sourceforge.net/lists/listinfo/trustees-general > > I'm using debian 3.1 on a productive server and in my /etc/init.d/trustees startup script, i rmmod capability before loading trustees. Works well for this server for 150 days with about 120 users. I've a problem on renaming files (not directories) through a samba share. Perhaps, it's the problem with hard links... ?? I should try the latest subversion trunk when I come back from vacations. Best regards. Hubert TOUVET SERMO ARRK Group. |
|
From: <ae...@ks...> - 2005-08-17 02:15:47
|
Quoting Heiko Noordhof <hei...@xs...>: > However, when statically linked into the kernel, it seems to work. > But > I'd like to be able to unload the module to be able to create > hardlinks. I've recently found out that in the early startup of Debian (in the initrd) the capabilities module is loaded. Unfortunately, until the security module stacking code makes it into mainline kernel (allowing multiple security modules), this will disallow trustees from loading. Since the loading is done so early, it is rather difficult to load the trustees module prior to the capabilities module, which is why you are running into problems. You can perhaps rmmod the capabilities module and load the trustees module instead. Also, as root you should always be able to create hard links fine. Also, in the latest subversion, I have code to allow hard links between directories under the same trustee object. That way if you have a trustee object(s) for /home, your users would be free to create hard links to/from files within their home directories (even into different directories under /home). I will admit, though, I have received very little feedback on this new feature. It seems to work for me, but I've been unable to test it fully yet so your mileage may vary. Thanks, Andrew Ruder P.S. The capability module is called "capability" or "commoncap" if you want to try the rmmod approach. -- Andrew E. Ruder <ae...@ks...> http://www.aeruder.net |
|
From: Piotr R. <Pio...@ne...> - 2005-08-12 15:23:35
|
On Friday 12 of August 2005 17:12, Andrew Ruder wrote: > > Ouch... > > > > So it would be a tricky as far as the capabilities module is loaded in > > the initrd image. > > That could really be a showstopper towards a debian package, as I was > rather sure that some of the new debian/ubuntu stuff (hald perhaps) was > always checking that the capabilities module was loaded at start. Many of Debian packages are linked against libcap1 and AFAIK some daemons won't even start if the kernel is missing the capabilities system. -- .''`. Piotr Roszatycki, Netia SA : :' : mailto:Pio...@ne... `. `' mailto:de...@de... `- |
|
From: Andrew R. <ae...@ks...> - 2005-08-12 15:12:17
|
Piotr Roszatycki wrote: > I think you've done Bcc instead of Cc :) Nah, I just typed that and totally forgot to CC the list at all so ended up just resending my e-mail to the list separately ;) > BTW, I was maintaing the previous version of trustees. I would be glad to see > the new trustees in the distribution. I've got almost ready package which > provides module source and kernel patch but if someone is working on the > package, I could drop my work. I'm not sure entirely how much work has been done towards a debian package, but I know that Nima has both a script that may be useful since it checks the trustees.conf a bit more thoroughly than the regular settrustees command does, and he also has some work done on a manpage. I know he is a bit stalled right now as I am still working on getting some rather large changes into subversion and I have neglected to answer a few questions he has had to completely finish the manpage. > Ouch... > > So it would be a tricky as far as the capabilities module is loaded in the > initrd image. That could really be a showstopper towards a debian package, as I was rather sure that some of the new debian/ubuntu stuff (hald perhaps) was always checking that the capabilities module was loaded at start. Perhaps the debian kernel patch package will require the stacking patches as well and a modified trustees to work with it? ( I don't believe it will take much work at all to get trustees to work with the stacking stuff since it does not use the security fields on various filesystem objects ) - Andy |
|
From: Andrew R. <ae...@ks...> - 2005-08-12 14:40:21
|
Piotr Roszatycki wrote: > I'm trying to do `insmod trustees.ko' on clean Debian system with > linux-image-2.6.12-1 package and I'm getting > > Trustees: Could not register security component > > from system :( > > Do you know what is going on? > > I would like to maintain the trustees package for Debian and provide the > source package for module which could work with the default kernel... I'm carbon-copying this to the mailing list since I think perhaps Nima was also working on debian-related things. (Including a man page). More than likely this means you have another security module loaded or compiled into the kernel. Capabilities? Selinux? Until the stacking patches make it into mainline and trustees is ported to use that API, only one security module is able to be used at a time. - Andy |
|
From: Andrew R. <ae...@ks...> - 2005-07-27 16:23:32
|
Hey all, I just synced up the public tree with my changes. I have tested them a bit, and it seemed to work. At the very least I made it through a backup with no problem (which used to crash trustees 90% of the time back at the beginning). The changes include: 1. Significant speed increases on deeply nested directories. 2. Hard links/renames of hardlinked files can occur when under the same trustee. If I just have a /home trustee, anyone can make hardlinks anywhere within /home. If I have a /home trustee and a /home/andy trustee, I can not make a hardlink between files in those two directories since this could cause a elevation of permissions. Rob, this should hopefully take care of the postfix problem. Read on for more detailed information on the changes or just headover to http://www.aeruder.net/subversion.php for instructions on how to sync to the trustees trunk. Feedback would be greatly appreciated and I will be doing additional testing and working out some other issues yet this week, Andy ... detailed explanation ... A fix to prevent DOS's. This can slow down the permission checking slightly in some cases, but not by much. Generally what trustees does is anytime it needs to check a permission it grabs the entire filename of the file (relative to the device). Something like /home/andy/Project/Archives/svn/ Then it will null out one / at a time starting with the 2nd. So it'll check / /home /home/andy Building up the trustees mask. However, imagine you have users that are doing things like while true ; do mkdir a cd a done You should try this sometime, trustees gets reallly really slow on deeply nested directories. /home/andy/a/a/a/a/a/a/a/a/a//a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a Now, however, trustees keeps track of the deepest trustee and only calculates filenames to that depth and only processes that deep. At least in my experience, trustees ACLs are generally fairly shallow due to their recursive nature. This should really speed up trustees in many cases. The other change is that it keeps track of the deepest trustee that affects a file. So if I do a lookup on /home/andy/Project, I will get /home as being the last trustee that took affect on the path. Now, when I make a hardlink, I lookup the deepest trustee on both of them, if they match, the hard link goes through. In short, hard links (and renames of hardlinked files) should be much smarter now and hopefully this will fix the postfix problems. |
|
From: Andrew R. <ae...@ks...> - 2005-07-26 14:45:54
|
All, I cleaned out a lot of the linked list handling last night, which frees me up to work on the hard link issue. I've already figured out how to solve it and speed up trustees significantly, and I think it will take impressively few changes. A couple days ago, I was getting a haircut and it came to me ;) I might need some help testing by the end of the week. (I haven't synced up the public repository yet). - Andy |
|
From: Andrew R. <ae...@ks...> - 2005-07-22 18:48:15
|
Hello all, I just released trustees 3.0. This will be the last stable release as the subversion trunk will be taking on massive amounts of destabilization, followed ( hopefully ;) ) by massive stabilization. This release includes a buffer-size calculation error fix that I had already recommended pulling in the subversion trunk to get the fix. It also includes makefile fixes for newer kernels and patches against several 2.6 kernels to allow compilation into the kernel instead of just being an external module. Go grab trustees 3.0 at: http://prdownloads.sourceforge.net/trustees/trustees-3.0.tar.bz2?download P.S. As I was putting together the trustees patches (using an excellent tool called quilt) I was having a ton of problems with the blocking of hardlinks that Rob saw. If there is interest, I could definitely post a small patch to trustees-3.0 that would disable the disabling of hard-links into separate subdirectories. I have already mentioned the insecurities that are possible with this, but if you need a quick workaround until I come up with a fix, I could definitely make that patch available. I know how frustrating it is now, so it has definitely moved to the top of my priority list. (I'm having to disable trustees just to put together kernel patches! geesh!) :) Also, I would recommend using the 3.0 release on your systems unless you're interested in doing some testing. The subversion trunk is going to start getting really ugly in the next couple weeks ;) Cheers, Andy -- Andrew Ruder http://www.aeruder.net |
|
From: Andrew R. <ae...@ks...> - 2005-07-21 13:42:59
|
Nima Talebi wrote: > Hey Andy, > > Good to hear from you again, thought you might have been abducted. If I > can help in any coding/testing let me know, I'd be more than glad to > help. Doing so will help me write better man pages too, so its all good. I will definitely need the help, but even just providing man pages and testing is more than helpful ;) I will download all your e-mails to attempt to determine the answers to the few questions you did have on ordering and such. And no, I haven't been abducted, just busy ;) - Andy |
|
From: Nima T. <ni...@jc...> - 2005-07-21 08:40:18
|
Hey Andy, Good to hear from you again, thought you might have been abducted. If I can help in any coding/testing let me know, I'd be more than glad to help. Doing so will help me write better man pages too, so its all good. Nima Andrew Ruder wrote: > Ok guys, > > Last night I looked at all my local changes that have not been committed > to subversion and what really needs to be done to fix Rob and others' > existing problems (as well as finish the documentation for Nima). > > Currently my changes include several changes towards making trustees use > general 2.6 kernel semantics. There are several problems with the > source code. For example, there is a single implementation of linked > lists in the kernel, but trustees is still using its own. There are > other similar problems where trustees is simply using old-style code > instead of 2.6ish code. This needs to be fixed as it greatly simplifies > the code. > > Also, there needs to be a overhaul on how trustees are stored in their > data structures. There needs to be a quick way to find out if the > trustees on one directory are the exact same as those on another > directory. Also, there needs to be a -=very=- fast way to determine > trustees for a directory. Try making a 600-deep directory structure > someetime and touching some files in there, your system cpu usage will > hit the top as trustees tries to process that big of a directory tree. > Both of these changes will be necessary for Rob to see what he wants > (and to fix several bugs on the SF.net page). > > Also, I am going to do something with the settrustees script. There may > be some sort of settrustees backend which actually sends it, and a perl > or python frontend which takes care of 99% of the logic. I hate writing > parsing code in C and I would be able to integrate a lot of Nima's > excellent work on his python scripts. > > In any case, I am certain that these changes will require many changes > to the code, and changes mean lots of testing. Since the new release > has come out, it took a while until it stabilized; and I still get the > occasional oops report. (Although, it has been running stable as a rock > on my machine). > > So what I am considering is just putting out a 3.0 with the one small > subversion fix I have and last night I cleaned up the makefiles to work > the -=correct=- way. (Was having some problem installing into the > correct location on newer kernels). > > Also with this, I would make the patches to several kernels to allow > compiling trustees into the kernel instead of just as a module. > > This would allow a stable release to be out there while these bigger > changes are going in. > > What do you think? > > Thanks, > Andy > > > ------------------------------------------------------- > SF.Net email is sponsored by: Discover Easy Linux Migration Strategies > from IBM. Find simple to follow Roadmaps, straightforward articles, > informative Webcasts and more! Get everything you need to get up to > speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click > _______________________________________________ > trustees-general mailing list > tru...@li... > https://lists.sourceforge.net/lists/listinfo/trustees-general |
|
From: Andrew R. <ae...@ks...> - 2005-07-19 14:51:36
|
Ok guys, Last night I looked at all my local changes that have not been committed to subversion and what really needs to be done to fix Rob and others' existing problems (as well as finish the documentation for Nima). Currently my changes include several changes towards making trustees use general 2.6 kernel semantics. There are several problems with the source code. For example, there is a single implementation of linked lists in the kernel, but trustees is still using its own. There are other similar problems where trustees is simply using old-style code instead of 2.6ish code. This needs to be fixed as it greatly simplifies the code. Also, there needs to be a overhaul on how trustees are stored in their data structures. There needs to be a quick way to find out if the trustees on one directory are the exact same as those on another directory. Also, there needs to be a -=very=- fast way to determine trustees for a directory. Try making a 600-deep directory structure someetime and touching some files in there, your system cpu usage will hit the top as trustees tries to process that big of a directory tree. Both of these changes will be necessary for Rob to see what he wants (and to fix several bugs on the SF.net page). Also, I am going to do something with the settrustees script. There may be some sort of settrustees backend which actually sends it, and a perl or python frontend which takes care of 99% of the logic. I hate writing parsing code in C and I would be able to integrate a lot of Nima's excellent work on his python scripts. In any case, I am certain that these changes will require many changes to the code, and changes mean lots of testing. Since the new release has come out, it took a while until it stabilized; and I still get the occasional oops report. (Although, it has been running stable as a rock on my machine). So what I am considering is just putting out a 3.0 with the one small subversion fix I have and last night I cleaned up the makefiles to work the -=correct=- way. (Was having some problem installing into the correct location on newer kernels). Also with this, I would make the patches to several kernels to allow compiling trustees into the kernel instead of just as a module. This would allow a stable release to be out there while these bigger changes are going in. What do you think? Thanks, Andy |
|
From: Rob S. <ro...@rs...> - 2005-07-14 15:08:33
|
Andy, I've got quite a few Dual Xeon 2.4s with Hyperthreading so let me know what you need. Thanks, -Rob Andrew Ruder wrote: > Rob See wrote: > >> I believe they are near each other in the tree. A maildir mailbox >> is set up with a parent directory, and then three subdirs: curr, new, >> and temp. I believe what happens is that the message gets put in temp, >> linked to new, and unlinked from temp . There was some discussion on >> the postfix list about using rename instead of link to deal with >> non-inode based file systems, but I haven't been able to find any >> patches implementing it. Having to do a separate acl for each postfix >> maildir on your system could get ugly really quickly. Is there an easy >> way to check if two dirs have the same trustees acls and then if they >> are, allow the link ? > > > Not right now, but I've been attempting to implement this for a long > time; however, I've had problems coming up with a data structure that > would allow easily determining if two directories are setup with the > same acls; however, as I see this is now affecting the use of trustees, > I will attempt to look at this more tonight. Unfortunately, I do not > have access to my SMP testing machine this summer (I'm on internship in > a different state, so I might need some of you with beefier machines to > be the "testers" for synchronization issues [ although I usually don't > have as many problems with this when I'm writing my own code as opposed > to simply modifying someone elses] ). > > I will try to get -something- in that works and then perhaps work on the > associated speed issues later. > > - Andy |
|
From: Andrew R. <ae...@ks...> - 2005-07-14 14:45:22
|
Rob See wrote: > I believe they are near each other in the tree. A maildir mailbox is > set up with a parent directory, and then three subdirs: curr, new, and > temp. I believe what happens is that the message gets put in temp, > linked to new, and unlinked from temp . There was some discussion on the > postfix list about using rename instead of link to deal with non-inode > based file systems, but I haven't been able to find any patches > implementing it. Having to do a separate acl for each postfix maildir on > your system could get ugly really quickly. Is there an easy way to check > if two dirs have the same trustees acls and then if they are, allow the > link ? Not right now, but I've been attempting to implement this for a long time; however, I've had problems coming up with a data structure that would allow easily determining if two directories are setup with the same acls; however, as I see this is now affecting the use of trustees, I will attempt to look at this more tonight. Unfortunately, I do not have access to my SMP testing machine this summer (I'm on internship in a different state, so I might need some of you with beefier machines to be the "testers" for synchronization issues [ although I usually don't have as many problems with this when I'm writing my own code as opposed to simply modifying someone elses] ). I will try to get -something- in that works and then perhaps work on the associated speed issues later. - Andy |
|
From: Rob S. <ro...@rs...> - 2005-07-13 23:23:35
|
All, I just discovered that postfix has a problem with delivering to a maildir mailbox when trustees is enabled. The problem manifests itself as the delivery agent complaining about Invalid cross-device link .I believe it creates the file in another dir and then hardlinks it to its final destination and deletes the original. The quick fix was to return 0 in the trustees_inode_link function, but for obvious reasons that isn't optimal. Do you have any suggestions on how this could be handled ? Thanks, -Rob |
|
From: Nima T. <ni...@jc...> - 2005-07-11 02:10:43
|
Hi Rob,
I've fixed the hardcoded '/data/' entries, and tested it on another
machine to make sure it does work. Please let me know how you go. I'm
sorry about that silly mistake, I work on it only when I get some time
to spare so sometimes I miss little silly things like that.
Nima
Rob See wrote:
> Nima,
>
> I'm having a problem with it.
> ./check-trustees.py
> Traceback (most recent call last):
> File "./check-trustees.py", line 22, in ?
> u=usage("check-trustees",usageBlob)
> NameError: name 'usage' is not defined
>
> so I changed usage to Usage and got
>
> ./check-trustees.py
> Verifying...................................................................done
>
> Traceback (most recent call last):
> File "./check-trustees.py", line 514, in ?
> main()
> File "./check-trustees.py", line 473, in main
> nodes["/data"]=Node("/data", trustees.processedTrustees["/data/"],
> None, False) KeyError: '/data/'
>
> also, if I try to do -h I get:
> Traceback (most recent call last):
> File "./check-trustees.py", line 514, in ?
> main()
> File "./check-trustees.py", line 449, in main
> Usage()
> TypeError: __init__() takes exactly 3 arguments (1 given)
>
> I set the path to the current directory and I do have Usage.py in the
> package I downloaded.
>
>
> Thanks,
> -Rob
>
> Nima Talebi wrote:
>
>> Get it again actually, I just fixed up the fact that it died on not
>> finding the trustees.conf file. You'll find 3 files now, Usage.py. Put
>> that along with Progress.py.
>>
>> Make sure you don't get one cached in your proxy server :)
>>
>> Sorry about that.
>>
>> Nima
>>
>> Rob See wrote:
>>
>>> Hi,
>>>
>>> Is this script available ?
>>>
>>> Thanks,
>>> -Rob
>>>
>>> Nima Talebi wrote:
>>>
>>>> Here's how check-trustees acts now, I've added a '-v' so that it
>>>> shows how it calculates what it calculates, as wrong as that may be :).
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> check-trustees -vp /data/imp/drafting/standards/archive/
>>>> Verifying...................................................................done
>>>>
>>>>
>>>> ***** PARENT *****
>>>> o *:CRWEBX
>>>> o +imp:REB
>>>>
>>>> ***** SELF *****
>>>> o *:CRWEBX
>>>> o +impdraft:REB
>>>> o +impdes:REB
>>>> o +impdraftadmin:RWEBX
>>>>
>>>> ***** CALCULATION *****
>>>> o Reading PARENT
>>>> * Acting on `+imp'
>>>> * pFlags: ['R', 'E', 'B']
>>>> * mFlags: []
>>>> * Selecting ALLOW List
>>>> o CREATING +imp with R
>>>> o ADDING E to +imp
>>>> o ADDING B to +imp
>>>> * New List: {'+imp': 'REB'}
>>>> o Reading SELF Wildcard CLEAR
>>>> * On : +imp
>>>> * REMOVING R from +imp
>>>> * New List: {'+imp': 'EB'}
>>>> * REMOVING E from +imp
>>>> * New List: {'+imp': 'B'}
>>>> * REMOVING B from +imp
>>>> * New List: {'+imp': ''}
>>>> * DELETING B from +imp
>>>> * New List: {}
>>>> o Reading SELF
>>>> * Acting on `+impdraft'
>>>> * pFlags: ['R', 'E', 'B']
>>>> * mFlags: []
>>>> * Selecting ALLOW List
>>>> o CREATING +impdraft with R
>>>> o ADDING E to +impdraft
>>>> o ADDING B to +impdraft
>>>> * New List: {'+impdraft': 'REB'}
>>>> o Reading SELF
>>>> * Acting on `+impdes'
>>>> * pFlags: ['R', 'E', 'B']
>>>> * mFlags: []
>>>> * Selecting ALLOW List
>>>> o CREATING +impdes with R
>>>> o ADDING E to +impdes
>>>> o ADDING B to +impdes
>>>> * New List: {'+impdraft': 'REB', '+impdes': 'REB'}
>>>> o Reading SELF
>>>> * Acting on `+impdraftadmin'
>>>> * pFlags: ['R', 'W', 'E', 'B', 'X']
>>>> * mFlags: []
>>>> * Selecting ALLOW List
>>>> o CREATING +impdraftadmin with R
>>>> o ADDING W to +impdraftadmin
>>>> o ADDING E to +impdraftadmin
>>>> o ADDING B to +impdraftadmin
>>>> o ADDING X to +impdraftadmin
>>>> * New List: {'+impdraft': 'REB', '+impdes': 'REB',
>>>> '+impdraftadmin': 'RWEBX'}
>>>>
>>>> COMPUTED ALLOW:{'+impdraft': 'REB', '+impdes': 'REB',
>>>> '+impdraftadmin': 'RWEBX'}
>>>> COMPUTED DENY: {}
>>>>
>>>> Summary for /data/imp/drafting/standards/archive
>>>> o user `root' has Full Access GRANTED
>>>> o group impdraft has read-only access (REB) ALLOWED
>>>> o group impdes has read-only access (REB) ALLOWED
>>>> o group impdraftadmin has full access (RWEBX) ALLOWED
>>>> x everyone else has Full Access DENIED
>>>>
>>>> Trustees Nodes Requested:130
>>>> Trustees Nodes Required :135
>>>> No errors in configuration file.
>>>> No warnings in configuration file.
>>>>
>>>>
>>>> -------------------------------------------------------
>>>> This SF.Net email is sponsored by: NEC IT Guy Games.
>>>> Get your fingers limbered up and give it your best shot. 4 great
>>>> events, 4
>>>> opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
>>>> win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20
>>>> _______________________________________________
>>>> trustees-general mailing list
>>>> tru...@li...
>>>> https://lists.sourceforge.net/lists/listinfo/trustees-general
>>>
>>>
>>>
>>>
>>>
>>
>>
>> -------------------------------------------------------
>> This SF.Net email is sponsored by the 'Do More With Dual!' webinar
>> happening
>> July 14 at 8am PDT/11am EDT. We invite you to explore the latest in dual
>> core and dual graphics technology at this free one hour event hosted
>> by HP, AMD, and NVIDIA. To register visit
>> http://www.hp.com/go/dualwebinar
>> _______________________________________________
>> trustees-general mailing list
>> tru...@li...
>> https://lists.sourceforge.net/lists/listinfo/trustees-general
>
>
>
|
|
From: Andrew R. <ae...@ks...> - 2005-07-10 17:55:32
|
Nima Talebi wrote: > Hi Rob, > > Forgive me for that; I will fix it up very soon and give you the url. > I forgot that I had hardcoded the mounting point. > > :/ > > Nima Haven't had a lot of time to work on trustees lately, but at least this problem may soon go away. There has been a lot of talk of introducing a standard securityfs (for security modules like selinux [ or trustees ] ) that would be mounted in /sys/security and would help get rid of a lot of the problems with finding the mount point of a non-standard trusteesfs. - Andy |
|
From: Nima T. <ni...@jc...> - 2005-07-10 11:33:52
|
Hi Rob,
Forgive me for that; I will fix it up very soon and give you the url.
I forgot that I had hardcoded the mounting point.
:/
Nima
Rob See wrote:
> Nima,
>
> I'm having a problem with it.
> ./check-trustees.py
> Traceback (most recent call last):
> File "./check-trustees.py", line 22, in ?
> u=usage("check-trustees",usageBlob)
> NameError: name 'usage' is not defined
>
> so I changed usage to Usage and got
>
> ./check-trustees.py
> Verifying...................................................................done
>
> Traceback (most recent call last):
> File "./check-trustees.py", line 514, in ?
> main()
> File "./check-trustees.py", line 473, in main
> nodes["/data"]=Node("/data", trustees.processedTrustees["/data/"],
> None, False) KeyError: '/data/'
>
> also, if I try to do -h I get:
> Traceback (most recent call last):
> File "./check-trustees.py", line 514, in ?
> main()
> File "./check-trustees.py", line 449, in main
> Usage()
> TypeError: __init__() takes exactly 3 arguments (1 given)
>
> I set the path to the current directory and I do have Usage.py in the
> package I downloaded.
>
>
> Thanks,
> -Rob
>
> Nima Talebi wrote:
>
>> Get it again actually, I just fixed up the fact that it died on not
>> finding the trustees.conf file. You'll find 3 files now, Usage.py. Put
>> that along with Progress.py.
>>
>> Make sure you don't get one cached in your proxy server :)
>>
>> Sorry about that.
>>
>> Nima
>>
>> Rob See wrote:
>>
>>> Hi,
>>>
>>> Is this script available ?
>>>
>>> Thanks,
>>> -Rob
>>>
>>> Nima Talebi wrote:
>>>
>>>> Here's how check-trustees acts now, I've added a '-v' so that it
>>>> shows how it calculates what it calculates, as wrong as that may be :).
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> check-trustees -vp /data/imp/drafting/standards/archive/
>>>> Verifying...................................................................done
>>>>
>>>>
>>>> ***** PARENT *****
>>>> o *:CRWEBX
>>>> o +imp:REB
>>>>
>>>> ***** SELF *****
>>>> o *:CRWEBX
>>>> o +impdraft:REB
>>>> o +impdes:REB
>>>> o +impdraftadmin:RWEBX
>>>>
>>>> ***** CALCULATION *****
>>>> o Reading PARENT
>>>> * Acting on `+imp'
>>>> * pFlags: ['R', 'E', 'B']
>>>> * mFlags: []
>>>> * Selecting ALLOW List
>>>> o CREATING +imp with R
>>>> o ADDING E to +imp
>>>> o ADDING B to +imp
>>>> * New List: {'+imp': 'REB'}
>>>> o Reading SELF Wildcard CLEAR
>>>> * On : +imp
>>>> * REMOVING R from +imp
>>>> * New List: {'+imp': 'EB'}
>>>> * REMOVING E from +imp
>>>> * New List: {'+imp': 'B'}
>>>> * REMOVING B from +imp
>>>> * New List: {'+imp': ''}
>>>> * DELETING B from +imp
>>>> * New List: {}
>>>> o Reading SELF
>>>> * Acting on `+impdraft'
>>>> * pFlags: ['R', 'E', 'B']
>>>> * mFlags: []
>>>> * Selecting ALLOW List
>>>> o CREATING +impdraft with R
>>>> o ADDING E to +impdraft
>>>> o ADDING B to +impdraft
>>>> * New List: {'+impdraft': 'REB'}
>>>> o Reading SELF
>>>> * Acting on `+impdes'
>>>> * pFlags: ['R', 'E', 'B']
>>>> * mFlags: []
>>>> * Selecting ALLOW List
>>>> o CREATING +impdes with R
>>>> o ADDING E to +impdes
>>>> o ADDING B to +impdes
>>>> * New List: {'+impdraft': 'REB', '+impdes': 'REB'}
>>>> o Reading SELF
>>>> * Acting on `+impdraftadmin'
>>>> * pFlags: ['R', 'W', 'E', 'B', 'X']
>>>> * mFlags: []
>>>> * Selecting ALLOW List
>>>> o CREATING +impdraftadmin with R
>>>> o ADDING W to +impdraftadmin
>>>> o ADDING E to +impdraftadmin
>>>> o ADDING B to +impdraftadmin
>>>> o ADDING X to +impdraftadmin
>>>> * New List: {'+impdraft': 'REB', '+impdes': 'REB',
>>>> '+impdraftadmin': 'RWEBX'}
>>>>
>>>> COMPUTED ALLOW:{'+impdraft': 'REB', '+impdes': 'REB',
>>>> '+impdraftadmin': 'RWEBX'}
>>>> COMPUTED DENY: {}
>>>>
>>>> Summary for /data/imp/drafting/standards/archive
>>>> o user `root' has Full Access GRANTED
>>>> o group impdraft has read-only access (REB) ALLOWED
>>>> o group impdes has read-only access (REB) ALLOWED
>>>> o group impdraftadmin has full access (RWEBX) ALLOWED
>>>> x everyone else has Full Access DENIED
>>>>
>>>> Trustees Nodes Requested:130
>>>> Trustees Nodes Required :135
>>>> No errors in configuration file.
>>>> No warnings in configuration file.
>>>>
>>>>
>>>> -------------------------------------------------------
>>>> This SF.Net email is sponsored by: NEC IT Guy Games.
>>>> Get your fingers limbered up and give it your best shot. 4 great
>>>> events, 4
>>>> opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
>>>> win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20
>>>> _______________________________________________
>>>> trustees-general mailing list
>>>> tru...@li...
>>>> https://lists.sourceforge.net/lists/listinfo/trustees-general
>>>
>>>
>>>
>>>
>>>
>>
>>
>> -------------------------------------------------------
>> This SF.Net email is sponsored by the 'Do More With Dual!' webinar
>> happening
>> July 14 at 8am PDT/11am EDT. We invite you to explore the latest in dual
>> core and dual graphics technology at this free one hour event hosted
>> by HP, AMD, and NVIDIA. To register visit
>> http://www.hp.com/go/dualwebinar
>> _______________________________________________
>> trustees-general mailing list
>> tru...@li...
>> https://lists.sourceforge.net/lists/listinfo/trustees-general
>
>
>
|
|
From: Nima T. <ni...@jc...> - 2005-07-08 04:56:59
|
Get it again actually, I just fixed up the fact that it died on not
finding the trustees.conf file. You'll find 3 files now, Usage.py. Put
that along with Progress.py.
Make sure you don't get one cached in your proxy server :)
Sorry about that.
Nima
Rob See wrote:
> Hi,
>
> Is this script available ?
>
> Thanks,
> -Rob
>
> Nima Talebi wrote:
>
>> Here's how check-trustees acts now, I've added a '-v' so that it shows
>> how it calculates what it calculates, as wrong as that may be :).
>>
>>
>>
>>
>>
>> check-trustees -vp /data/imp/drafting/standards/archive/
>> Verifying...................................................................done
>>
>>
>> ***** PARENT *****
>> o *:CRWEBX
>> o +imp:REB
>>
>> ***** SELF *****
>> o *:CRWEBX
>> o +impdraft:REB
>> o +impdes:REB
>> o +impdraftadmin:RWEBX
>>
>> ***** CALCULATION *****
>> o Reading PARENT
>> * Acting on `+imp'
>> * pFlags: ['R', 'E', 'B']
>> * mFlags: []
>> * Selecting ALLOW List
>> o CREATING +imp with R
>> o ADDING E to +imp
>> o ADDING B to +imp
>> * New List: {'+imp': 'REB'}
>> o Reading SELF Wildcard CLEAR
>> * On : +imp
>> * REMOVING R from +imp
>> * New List: {'+imp': 'EB'}
>> * REMOVING E from +imp
>> * New List: {'+imp': 'B'}
>> * REMOVING B from +imp
>> * New List: {'+imp': ''}
>> * DELETING B from +imp
>> * New List: {}
>> o Reading SELF
>> * Acting on `+impdraft'
>> * pFlags: ['R', 'E', 'B']
>> * mFlags: []
>> * Selecting ALLOW List
>> o CREATING +impdraft with R
>> o ADDING E to +impdraft
>> o ADDING B to +impdraft
>> * New List: {'+impdraft': 'REB'}
>> o Reading SELF
>> * Acting on `+impdes'
>> * pFlags: ['R', 'E', 'B']
>> * mFlags: []
>> * Selecting ALLOW List
>> o CREATING +impdes with R
>> o ADDING E to +impdes
>> o ADDING B to +impdes
>> * New List: {'+impdraft': 'REB', '+impdes': 'REB'}
>> o Reading SELF
>> * Acting on `+impdraftadmin'
>> * pFlags: ['R', 'W', 'E', 'B', 'X']
>> * mFlags: []
>> * Selecting ALLOW List
>> o CREATING +impdraftadmin with R
>> o ADDING W to +impdraftadmin
>> o ADDING E to +impdraftadmin
>> o ADDING B to +impdraftadmin
>> o ADDING X to +impdraftadmin
>> * New List: {'+impdraft': 'REB', '+impdes': 'REB', '+impdraftadmin':
>> 'RWEBX'}
>>
>> COMPUTED ALLOW:{'+impdraft': 'REB', '+impdes': 'REB',
>> '+impdraftadmin': 'RWEBX'}
>> COMPUTED DENY: {}
>>
>> Summary for /data/imp/drafting/standards/archive
>> o user `root' has Full Access GRANTED
>> o group impdraft has read-only access (REB) ALLOWED
>> o group impdes has read-only access (REB) ALLOWED
>> o group impdraftadmin has full access (RWEBX) ALLOWED
>> x everyone else has Full Access DENIED
>>
>> Trustees Nodes Requested:130
>> Trustees Nodes Required :135
>> No errors in configuration file.
>> No warnings in configuration file.
>>
>>
>> -------------------------------------------------------
>> This SF.Net email is sponsored by: NEC IT Guy Games.
>> Get your fingers limbered up and give it your best shot. 4 great
>> events, 4
>> opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
>> win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20
>> _______________________________________________
>> trustees-general mailing list
>> tru...@li...
>> https://lists.sourceforge.net/lists/listinfo/trustees-general
>
>
>
|
|
From: Nima T. <ni...@jc...> - 2005-07-08 04:25:30
|
Sure, grab it from http://intranet.jcorp.com.au/tmp/ct.tar.gz It includes 2 files: # tar -tzf ct.tar.gz tmp/check-trustees/ tmp/check-trustees/check-trustees.py tmp/check-trustees/Progress.py Just place the Progress.py anywhere you like, but make sure that check-trustees.py knows how to get to it. Also require python 2.4. Let me know if you have any issues with it. When I get around to it I'll make a .deb and .rpm, and a man page. Nima Rob See wrote: > Hi, > > Is this script available ? > > Thanks, > -Rob > > Nima Talebi wrote: > >> Here's how check-trustees acts now, I've added a '-v' so that it shows >> how it calculates what it calculates, as wrong as that may be :). >> >> >> >> >> >> check-trustees -vp /data/imp/drafting/standards/archive/ >> Verifying...................................................................done >> >> >> ***** PARENT ***** >> o *:CRWEBX >> o +imp:REB >> >> ***** SELF ***** >> o *:CRWEBX >> o +impdraft:REB >> o +impdes:REB >> o +impdraftadmin:RWEBX >> >> ***** CALCULATION ***** >> o Reading PARENT >> * Acting on `+imp' >> * pFlags: ['R', 'E', 'B'] >> * mFlags: [] >> * Selecting ALLOW List >> o CREATING +imp with R >> o ADDING E to +imp >> o ADDING B to +imp >> * New List: {'+imp': 'REB'} >> o Reading SELF Wildcard CLEAR >> * On : +imp >> * REMOVING R from +imp >> * New List: {'+imp': 'EB'} >> * REMOVING E from +imp >> * New List: {'+imp': 'B'} >> * REMOVING B from +imp >> * New List: {'+imp': ''} >> * DELETING B from +imp >> * New List: {} >> o Reading SELF >> * Acting on `+impdraft' >> * pFlags: ['R', 'E', 'B'] >> * mFlags: [] >> * Selecting ALLOW List >> o CREATING +impdraft with R >> o ADDING E to +impdraft >> o ADDING B to +impdraft >> * New List: {'+impdraft': 'REB'} >> o Reading SELF >> * Acting on `+impdes' >> * pFlags: ['R', 'E', 'B'] >> * mFlags: [] >> * Selecting ALLOW List >> o CREATING +impdes with R >> o ADDING E to +impdes >> o ADDING B to +impdes >> * New List: {'+impdraft': 'REB', '+impdes': 'REB'} >> o Reading SELF >> * Acting on `+impdraftadmin' >> * pFlags: ['R', 'W', 'E', 'B', 'X'] >> * mFlags: [] >> * Selecting ALLOW List >> o CREATING +impdraftadmin with R >> o ADDING W to +impdraftadmin >> o ADDING E to +impdraftadmin >> o ADDING B to +impdraftadmin >> o ADDING X to +impdraftadmin >> * New List: {'+impdraft': 'REB', '+impdes': 'REB', '+impdraftadmin': >> 'RWEBX'} >> >> COMPUTED ALLOW:{'+impdraft': 'REB', '+impdes': 'REB', >> '+impdraftadmin': 'RWEBX'} >> COMPUTED DENY: {} >> >> Summary for /data/imp/drafting/standards/archive >> o user `root' has Full Access GRANTED >> o group impdraft has read-only access (REB) ALLOWED >> o group impdes has read-only access (REB) ALLOWED >> o group impdraftadmin has full access (RWEBX) ALLOWED >> x everyone else has Full Access DENIED >> >> Trustees Nodes Requested:130 >> Trustees Nodes Required :135 >> No errors in configuration file. >> No warnings in configuration file. >> >> >> ------------------------------------------------------- >> This SF.Net email is sponsored by: NEC IT Guy Games. >> Get your fingers limbered up and give it your best shot. 4 great >> events, 4 >> opportunities to win big! Highest score wins.NEC IT Guy Games. Play to >> win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20 >> _______________________________________________ >> trustees-general mailing list >> tru...@li... >> https://lists.sourceforge.net/lists/listinfo/trustees-general > > > |
|
From: Rob S. <ro...@rs...> - 2005-07-08 04:04:13
|
Hi,
Is this script available ?
Thanks,
-Rob
Nima Talebi wrote:
> Here's how check-trustees acts now, I've added a '-v' so that it shows
> how it calculates what it calculates, as wrong as that may be :).
>
>
>
>
>
> check-trustees -vp /data/imp/drafting/standards/archive/
> Verifying...................................................................done
>
>
> ***** PARENT *****
> o *:CRWEBX
> o +imp:REB
>
> ***** SELF *****
> o *:CRWEBX
> o +impdraft:REB
> o +impdes:REB
> o +impdraftadmin:RWEBX
>
> ***** CALCULATION *****
> o Reading PARENT
> * Acting on `+imp'
> * pFlags: ['R', 'E', 'B']
> * mFlags: []
> * Selecting ALLOW List
> o CREATING +imp with R
> o ADDING E to +imp
> o ADDING B to +imp
> * New List: {'+imp': 'REB'}
> o Reading SELF Wildcard CLEAR
> * On : +imp
> * REMOVING R from +imp
> * New List: {'+imp': 'EB'}
> * REMOVING E from +imp
> * New List: {'+imp': 'B'}
> * REMOVING B from +imp
> * New List: {'+imp': ''}
> * DELETING B from +imp
> * New List: {}
> o Reading SELF
> * Acting on `+impdraft'
> * pFlags: ['R', 'E', 'B']
> * mFlags: []
> * Selecting ALLOW List
> o CREATING +impdraft with R
> o ADDING E to +impdraft
> o ADDING B to +impdraft
> * New List: {'+impdraft': 'REB'}
> o Reading SELF
> * Acting on `+impdes'
> * pFlags: ['R', 'E', 'B']
> * mFlags: []
> * Selecting ALLOW List
> o CREATING +impdes with R
> o ADDING E to +impdes
> o ADDING B to +impdes
> * New List: {'+impdraft': 'REB', '+impdes': 'REB'}
> o Reading SELF
> * Acting on `+impdraftadmin'
> * pFlags: ['R', 'W', 'E', 'B', 'X']
> * mFlags: []
> * Selecting ALLOW List
> o CREATING +impdraftadmin with R
> o ADDING W to +impdraftadmin
> o ADDING E to +impdraftadmin
> o ADDING B to +impdraftadmin
> o ADDING X to +impdraftadmin
> * New List: {'+impdraft': 'REB', '+impdes': 'REB', '+impdraftadmin':
> 'RWEBX'}
>
> COMPUTED ALLOW:{'+impdraft': 'REB', '+impdes': 'REB',
> '+impdraftadmin': 'RWEBX'}
> COMPUTED DENY: {}
>
> Summary for /data/imp/drafting/standards/archive
> o user `root' has Full Access GRANTED
> o group impdraft has read-only access (REB) ALLOWED
> o group impdes has read-only access (REB) ALLOWED
> o group impdraftadmin has full access (RWEBX) ALLOWED
> x everyone else has Full Access DENIED
>
> Trustees Nodes Requested:130
> Trustees Nodes Required :135
> No errors in configuration file.
> No warnings in configuration file.
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: NEC IT Guy Games.
> Get your fingers limbered up and give it your best shot. 4 great
> events, 4
> opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
> win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20
> _______________________________________________
> trustees-general mailing list
> tru...@li...
> https://lists.sourceforge.net/lists/listinfo/trustees-general
|
|
From: Andrew R. <ae...@ks...> - 2005-06-08 14:23:49
|
Nima Talebi wrote: > I don't know about the CONFIG_SECURITY_CAPABILITIES, try turning that > off to start with. Do what Nima said :). Until the LSM stacking patches make it into mainline, there really is no way to have multiple security modules loaded simultaneously. :-/ - Andy |
|
From: Nima T. <ni...@jc...> - 2005-06-08 06:12:15
|
Patrick Felt wrote: > I'm running a custom compiled 2.6.11 gentoo patched r9 kernel. i've enabled CONFIG_SECURITY and CONFIG_SECURITY_CAPABILITIES and am trying to run the trustees module. I don't know about the CONFIG_SECURITY_CAPABILITIES, try turning that off to start with. > > i've done the following steps in this order (and nothing else from the readme). > > 1. compiled the kernel with the above options > 2. rebooted to that kernel Step 2.5... cd <path-to-trustees-source>/module/ make install ...or " For non-typical situations, the makefile may not be able to find your kernel source directory. If you have problems, try compiling with"... make KDIR=/path/to/src/linux-2.6.x install > 3. modprobe trustees (trustees-3.0pre3 -- or pre2 doesn't matter) ...is that what you did? Also try doing a `svn update' in Andrew's trustees source directory, should be at revision 107 at the moment. I hope that helps in some way. To give you some confidence, I'm running 2.6.11, custom kernel, has been running for a couple of months with no issues at all. Nima > > i get > > FATAL: Error inserting trustees (/lib/modules/2.6.11-gentoo-r9/extra/trustees.ko): Invalid argument > > on the screen and > > Trustees: Could not register security component > > in the kernel dmesg log > > what am i doing wrong? > > pat > > > > ------------------------------------------------------- > This SF.Net email is sponsored by: NEC IT Guy Games. How far can you shotput > a projector? How fast can you ride your desk chair down the office luge track? > If you want to score the big prize, get to know the little guy. > Play to win an NEC 61" plasma display: http://www.necitguy.com/?r > _______________________________________________ > trustees-general mailing list > tru...@li... > https://lists.sourceforge.net/lists/listinfo/trustees-general |
38 messages has been excluded from this view by a project administrator.