[rsbac] Suggestions with backups

Javier J. Martínez Cabezón tazok.id0 at gmail.com
Tue Jan 13 20:39:46 CET 2009


No I haven't changed it, Do you mean that PaX defaults are different
that the rsbac PaX defaults?
In Pax I have peMRXS, in rsbac section PeMRXS, since I use one IA32
architecture I can't use pageexec approach. All backup get as flags
PeMRXS.

As pax flags default templates and netobj is also taken by backup_all.

2009/1/13 Amon Ott <ao en rsbac.org>:
> Am Dingsdag 13 Januor 2009 schrieb Javier J. Martínez Cabezón:
>> Hi, If you don't like the time spent restoring your rsbac backup
>> policy you could for example remove the lines with the DEFAULT pax
>> FLAGS from your script (at least until one more efficient method would
>> being developed).
>>
>> My backup script has almost 231000 lines of commands, from them more
>> than 200000 has files with the default pax_flags (those specified in
>> the .config).
>
> 1.4.0 attr_back_fd allows to specify the modules to backup. So you can backup
> PAX only on /bin etc. and the rest everywhere.
>
> If you see so many pax_flags line: Have you changed the default flags in
> kernel config? Normally, default values should not be printed in backup.
>
> Amon.
> --
> http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22
> _______________________________________________
> rsbac mailing list
> rsbac en rsbac.org
> http://www.rsbac.org/mailman/listinfo/rsbac
>


More information about the rsbac mailing list