summaryrefslogtreecommitdiff
path: root/lib/libc
diff options
context:
space:
mode:
authorchristos <christos@NetBSD.org>2006-08-11 19:17:47 +0000
committerchristos <christos@NetBSD.org>2006-08-11 19:17:47 +0000
commitce0ef6cfc4cf73d96e27c5e982f2cad7bcbd452a (patch)
treefc88b658a10d4098776eea53d544a8ad2d9bb33a /lib/libc
parent67a75c57728f67de0cf2253c672e18bb26c12265 (diff)
Pretending to be Elad's keyboard:
fileassoc.diff adds a fileassoc_table_run() routine that allows you to pass a callback to be called with every entry on a given mount. veriexec.diff adds some raw device access policies: if raw disk is opened at strict level 1, all fingerprints on this disk will be invalidated as a safety measure. level 2 will not allow opening disk for raw writing if we monitor it, and prevent raw writes to memory. level 3 will not allow opening any disk for raw writing. both update all relevant documentation. veriexec concept is okay blymn@.
Diffstat (limited to 'lib/libc')
-rw-r--r--lib/libc/gen/sysctl.322
1 files changed, 17 insertions, 5 deletions
diff --git a/lib/libc/gen/sysctl.3 b/lib/libc/gen/sysctl.3
index 53907977244..5aa2e738e99 100644
--- a/lib/libc/gen/sysctl.3
+++ b/lib/libc/gen/sysctl.3
@@ -1,4 +1,4 @@
-.\" $NetBSD: sysctl.3,v 1.177 2006/07/24 21:48:13 wiz Exp $
+.\" $NetBSD: sysctl.3,v 1.178 2006/08/11 19:17:47 christos Exp $
.\"
.\" Copyright (c) 1993
.\" The Regents of the University of California. All rights reserved.
@@ -29,7 +29,7 @@
.\"
.\" @(#)sysctl.3 8.4 (Berkeley) 5/9/95
.\"
-.Dd July 24, 2006
+.Dd August 10, 2006
.Dt SYSCTL 3
.Os
.Sh NAME
@@ -960,26 +960,38 @@ Under each node there will be three variables, indicating the mount
point, the file-system type, and the number of entries.
.It Li VERIEXEC_STRICT
Controls the strict level of Veriexec.
-The strict level defines how
-Veriexec will treat various situations.
+The strict level defines how Veriexec will treat various situations.
+.Pp
In strict level 0, the system is in learning mode and will only warn about
-fingerprint mismatches, aswell as allow removal of fingerprinted files.
+fingerprint mismatches, as well as allow removal of fingerprinted files.
It is the only level where fingerprints can be loaded.
+.Pp
In strict level 1, the system is in IDS mode.
It will deny access to files with mismatched fingerprints.
Write access to monitored files will be permitted, but once modified, further
access to them will be denied.
Monitored files cannot be removed.
+If a disk will be opened for raw writing, Veriexec will invalidate all
+fingerprints on that disk, if it is monitored.
+.Pp
In strict level 2, the system is in IPS mode.
It has all effects of
strict level 1, plus it will deny write access to monitored files and enforce
access type (direct, indirect, file).
Execution of non-monitored files is denied.
+Opening of raw disks for writing will be denied if the disk is monitored.
+Attempts to write to kernel memory, either via
+.Pa /dev/mem
+or
+.Pa /dev/kmem ,
+will be denied to protect Veriexec's internal data-structures.
+.Pp
Strict level 3 operates as lockdown mode.
It will have all effects of
strict level 2, but it will also prevent access to non-monitored files.
Furthermore, it will prevent addition of new files to the system, and
allow writing only to files opened before the strict level was raised.
+All attempts to open a disk for raw writing will be denied.
.It Li VERIEXEC_VERBOSE
Controls the verbosity level of Veriexec.
If 0, only the minimal