LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices



Reply
 
Search this Thread
Old 03-02-2006, 08:30 AM   #1
ledow
Member
 
Registered: Apr 2005
Location: UK
Distribution: Slackware 13.0
Posts: 241

Rep: Reputation: 34
Pls help me ID this Linux software/website


A few weeks ago, there was some article (probably in something like LWN.net, LinuxGazette or Linux.org or something) about a Linux security enhancement package. It was on a similar vein to SELinux but used entirely different methods of locking down users and programs so they couldn't wreak havoc on Linux systems.

Anyway, on their website they had an ordinary HTML form where you could upload ANY perl, C or bash script and it would automatically compile and execute that code on a locked-down computer their end and show you the result, obviously so you could then see for yourself how secure the thing was.

I need to find this website again to show someone that it's true and does exist. I've searched my bookmarks, my favourite sites, all my RSS feeds and cannot find the thing.

I know that's not a lot to go on but I'd really like to find this site/software in question and I'm hoping someone will remember it or have it in their bookmarks. I'm not bothered about finding the original article on it, just the project's homepage.

The website was white-ish or off-white

The form you uploaded to accepted C, perl, bash and at least one other type of code (python?).

It showed the results afterwards on a HTML page, including stderr and stdout as (I think) green and red text.

It may have been GPL software, I can't rightly remember. I have a feeling it was OS in some way.

The site made a point of differentiating between the methods used in SELinux and in their software.

It was definitely talking about locking down current kernel releases, so it's not some obsolete thing.

Can anyone identify the software in question and (hopefully) the homepage for it?
 
Old 03-02-2006, 09:11 AM   #2
marozsas
Senior Member
 
Registered: Dec 2005
Location: Campinas/SP - Brazil
Distribution: SuSE, RHEL, Fedora, Ubuntu
Posts: 1,393
Blog Entries: 1

Rep: Reputation: 64
Are you talking about Novell's Application Armor ? (http://lwn.net/Articles/166975/)
 
Old 03-02-2006, 09:44 AM   #3
ledow
Member
 
Registered: Apr 2005
Location: UK
Distribution: Slackware 13.0
Posts: 241

Original Poster
Rep: Reputation: 34
No, don't think so.

If I remember rightly, this page actually compared itself to AppArmor and SELinux and showed the differences. I'm almost that sure it was also a kernel patch and not an LSM.

Thanks for trying though. Any others?
 
Old 03-02-2006, 09:48 AM   #4
ledow
Member
 
Registered: Apr 2005
Location: UK
Distribution: Slackware 13.0
Posts: 241

Original Poster
Rep: Reputation: 34
Also, on a quick hunch which had me grepping through old RSS archives, it wasn't systrace either.
 
Old 03-02-2006, 11:09 AM   #5
Avatar
Member
 
Registered: May 2001
Location: Canada
Distribution: old ones
Posts: 532

Rep: Reputation: 30
I came up with:
- Trustix
- EnGarde Linux
- TrustedBSD

... but their websites didn't have any kind of upload and test this feature.
 
Old 03-02-2006, 11:23 AM   #6
marozsas
Senior Member
 
Registered: Dec 2005
Location: Campinas/SP - Brazil
Distribution: SuSE, RHEL, Fedora, Ubuntu
Posts: 1,393
Blog Entries: 1

Rep: Reputation: 64
Then, you are talking about PAX, smash stack protection, Rule Set Based Access Control (RSBAC), buffer protection execution, and others patches to make linux more secure.
There is a distribution that has all this built in: Adamantix.
 
Old 03-02-2006, 12:16 PM   #7
Hobbletoe
Member
 
Registered: Sep 2004
Location: Dayton, Oh
Distribution: Linux Mint 10, Linux Mint 11
Posts: 148

Rep: Reputation: 18
The only software for locking down a system that I've heard of other than SELinux is grsecurity and LIDS.

Last edited by Hobbletoe; 03-02-2006 at 12:55 PM.
 
Old 03-02-2006, 02:15 PM   #8
Avatar
Member
 
Registered: May 2001
Location: Canada
Distribution: old ones
Posts: 532

Rep: Reputation: 30
I think I found it... is it sysmask?

http://wims.unice.fr/sysmask/doc/index.html

It compares to SELinux and systrace here ...
http://wims.unice.fr/sysmask/doc/compare.txt

... and the form you refer to is here... (the Sysmask security challenge)
http://wims.unice.fr/wims/wims.cgi?m...nice/challenge

Last edited by Avatar; 03-02-2006 at 02:16 PM. Reason: added a link
 
Old 03-02-2006, 03:27 PM   #9
ledow
Member
 
Registered: Apr 2005
Location: UK
Distribution: Slackware 13.0
Posts: 241

Original Poster
Rep: Reputation: 34
Avatar - 10 out of 10, go to the top of the class. Thank you!
 
Old 03-03-2006, 06:01 AM   #10
marozsas
Senior Member
 
Registered: Dec 2005
Location: Campinas/SP - Brazil
Distribution: SuSE, RHEL, Fedora, Ubuntu
Posts: 1,393
Blog Entries: 1

Rep: Reputation: 64
I never heard about sysmask !
And it sounds so good ! Even better than SELinux.
Why theses things don't get the proper visibility they deserves ?

I am glad I subscribed to this threat. Thanks for the hint, both of you !

cheers,
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Linux Software website erpe Linux - Software 7 11-10-2005 10:18 AM
is it any software in linux can used to make website? like frontpage or dreamweave in sorno Linux - Software 5 11-05-2004 12:06 AM
pls,advice me good website to learn Java vanhelsing Linux - Software 1 06-09-2004 02:24 PM
pls,Recommend website to learn c++ vanhelsing Programming 2 06-08-2004 07:10 AM


All times are GMT -5. The time now is 11:00 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration