[10763] in bugtraq
Re: Bastille Linux amd kha0S Linux
daemon@ATHENA.MIT.EDU (Bruno Wolff III)
Wed Jun 9 14:56:23 1999
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Message-Id: <19990608142707.A1821@cerberus.csd.uwm.edu>
Date: Tue, 8 Jun 1999 14:27:07 -0500
Reply-To: Bruno Wolff III <bruno@CERBERUS.CSD.UWM.EDU>
From: Bruno Wolff III <bruno@CERBERUS.CSD.UWM.EDU>
X-To: "M. Adam Kendall" <mak@KHA0S.ORG>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <NCBBJGNCENBLMGLBJLAHOEPLDOAA.mak@kha0s.org>; from "M. Adam
Kendall" <mak@KHA0S.ORG> on Thu, Jun 03, 1999 at 08:29:02PM -0400
On Thu, Jun 03, 1999 at 08:29:02PM -0400,
"M. Adam Kendall" <mak@KHA0S.ORG> wrote:
>
> Should anyone want to view the three major secure linux projects, the web
> sites
> listed should give anyone enough information about all of them.
There are also some other related projects.
The Linux-Privs project is adding posix 1e capabilities to Linux. This
keeps the admin from having to give away the whole system to setuid
programs. It doesn't solve problems for users that want to run untrusted
programs without having them able to do annoying things to them.
There is information on this at:
http://www.us.kernel.org/pub/linux/libs/security/linux-privs/doc/linux-privs.html/linux-privs.html
http://atrey.karlin.mff.cuni.cz/~pavel/elfcap.html
There is also the Dionysix project to develop a posix environment on top
of EROS. I don't know how active this project really is. You can find out
more about EROS at:
http://www.eros-os.org/