diff options
| author | christos <christos@NetBSD.org> | 2006-08-11 19:17:47 +0000 |
|---|---|---|
| committer | christos <christos@NetBSD.org> | 2006-08-11 19:17:47 +0000 |
| commit | ce0ef6cfc4cf73d96e27c5e982f2cad7bcbd452a (patch) | |
| tree | fc88b658a10d4098776eea53d544a8ad2d9bb33a /lib/libc | |
| parent | 67a75c57728f67de0cf2253c672e18bb26c12265 (diff) | |
Pretending to be Elad's keyboard:
fileassoc.diff adds a fileassoc_table_run() routine that allows you to
pass a callback to be called with every entry on a given mount.
veriexec.diff adds some raw device access policies: if raw disk is
opened at strict level 1, all fingerprints on this disk will be
invalidated as a safety measure. level 2 will not allow opening disk
for raw writing if we monitor it, and prevent raw writes to memory.
level 3 will not allow opening any disk for raw writing.
both update all relevant documentation.
veriexec concept is okay blymn@.
Diffstat (limited to 'lib/libc')
| -rw-r--r-- | lib/libc/gen/sysctl.3 | 22 |
1 files changed, 17 insertions, 5 deletions
diff --git a/lib/libc/gen/sysctl.3 b/lib/libc/gen/sysctl.3 index 53907977244..5aa2e738e99 100644 --- a/lib/libc/gen/sysctl.3 +++ b/lib/libc/gen/sysctl.3 @@ -1,4 +1,4 @@ -.\" $NetBSD: sysctl.3,v 1.177 2006/07/24 21:48:13 wiz Exp $ +.\" $NetBSD: sysctl.3,v 1.178 2006/08/11 19:17:47 christos Exp $ .\" .\" Copyright (c) 1993 .\" The Regents of the University of California. All rights reserved. @@ -29,7 +29,7 @@ .\" .\" @(#)sysctl.3 8.4 (Berkeley) 5/9/95 .\" -.Dd July 24, 2006 +.Dd August 10, 2006 .Dt SYSCTL 3 .Os .Sh NAME @@ -960,26 +960,38 @@ Under each node there will be three variables, indicating the mount point, the file-system type, and the number of entries. .It Li VERIEXEC_STRICT Controls the strict level of Veriexec. -The strict level defines how -Veriexec will treat various situations. +The strict level defines how Veriexec will treat various situations. +.Pp In strict level 0, the system is in learning mode and will only warn about -fingerprint mismatches, aswell as allow removal of fingerprinted files. +fingerprint mismatches, as well as allow removal of fingerprinted files. It is the only level where fingerprints can be loaded. +.Pp In strict level 1, the system is in IDS mode. It will deny access to files with mismatched fingerprints. Write access to monitored files will be permitted, but once modified, further access to them will be denied. Monitored files cannot be removed. +If a disk will be opened for raw writing, Veriexec will invalidate all +fingerprints on that disk, if it is monitored. +.Pp In strict level 2, the system is in IPS mode. It has all effects of strict level 1, plus it will deny write access to monitored files and enforce access type (direct, indirect, file). Execution of non-monitored files is denied. +Opening of raw disks for writing will be denied if the disk is monitored. +Attempts to write to kernel memory, either via +.Pa /dev/mem +or +.Pa /dev/kmem , +will be denied to protect Veriexec's internal data-structures. +.Pp Strict level 3 operates as lockdown mode. It will have all effects of strict level 2, but it will also prevent access to non-monitored files. Furthermore, it will prevent addition of new files to the system, and allow writing only to files opened before the strict level was raised. +All attempts to open a disk for raw writing will be denied. .It Li VERIEXEC_VERBOSE Controls the verbosity level of Veriexec. If 0, only the minimal |
