LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Security kernel option: Default Linux Capabilities (https://www.linuxquestions.org/questions/linux-security-4/security-kernel-option-default-linux-capabilities-239108/)

orgee 10-05-2004 01:34 PM

Security kernel option: Default Linux Capabilities
 
I transferred to Linux so I can work on 3d graphics so I took the necessary steps to get my 3d acceleration working and all my periphirals getting detected and working to my liking. I decided to recompile the kernel so I can compile it for my cpu and I saw an option in the Security options called "Default Linux Capabilities".. I turned that ON (not knowing what it really does, but it sounded like I needed it for some reason) and then built the kernel.. Now with this new nice kernel I'm having problems connecting to other types of connection besides HTTP. For example, attempting to connect to my FTP server in my website so I can upload my artwork doesnt work anymore. I also cannot connect to GAIM or any instant messaging. And now it takes longer to connect to IRC servers such as Freenode that I usually connect to instantly..

So what I'm thinking here is that "Default Linux Capabilities" did something to my system which made it more strict, which is good.. But now I need to enable access to some of those connections i said above such as FTP, Instant Messaging, but I don't know how to do it with this new security thing.

I googled Google for default linux capabilities and all i got is a description or article about it being integrated in kernel 2.6.

I have another option which is to recompile the kernel and exclude that security option so its not built in my kernel..(but why would I do such a thing?)

If you could help me out by telling me by pointing me to the right direction as to how I can enable access to those connections or a website showing a quick and dirty way on how to configure it, that would be great.

unSpawn 10-10-2004 07:55 AM

What you choose was part of the Linux Security Module framework (properly TLA'ed to LSM) which is std from kernel version 2.6.x on. If you're sure you need LIDS, SELinux, Dazuko or other security framework modules, please read up on them before activating any. If not, disable them and please check out the LQ FAQ: Security references on how to secure your box.


All times are GMT -5. The time now is 09:17 AM.