Anyone here use Tomoyo Linux? (if not, maybe you should try it)

zeebra · 02-18-2023, 04:38 AM

Quote:

Originally Posted by rnturn

Maybe, with some work, this could be a blog post on LQ?

Hmm, I did post some related things a while back as a blog post:
https://www.linuxquestions.org/quest...to-self-38348/

And recently I added a part 2:
https://www.linuxquestions.org/quest...riences-38894/

If it is of any interest.

zeebra · 02-18-2023, 04:44 AM

Quote:

Originally Posted by devafree

I decided to go with Tomoyo 2.6.x LSM, and later play with what I said above.

Thanks!

Nice!

I'm just about ready to experiment with SELinux on Slackware 15.0 and document the process and perhaps write some howto about it eventually. But it's a big commitment of effort and time, so I still have to brave up a little.

I'm as you guess using Tomoyo 2.6 meanwhile, and I will continue to use it. But I'm hoping the previous poster is wrong in saying the LSM are not stackable, because that is contrary to the information from Tomoyo website which states since 2.6, specifically Tomoyo is stackable. Plus there is information online suggesting in the future other major LSM will be stackable as well. Perhaps based on the works of Tomoyo making it stackable with other major LSM's?

zeebra · 02-18-2023, 04:53 AM

Quote:

Originally Posted by devafree

Why I am interested in a kernel space Mandatory Access Control (MAC) Linux Security Module like Tomoyo:-

Enforce security policies.
Follow least privilege rule for as many system processes as possible.
It is a requirement in data security certification with external audits.
In my case, we want to get formally compliant with PCI DSS (Payment Card Industry Data Security Standard) and as a part of that, we adopted other standards internally, such as CIS' benchmarks (Center for Internet Security). CIS provided a security benchmark for Slackware 10.4, which is now archived. The current document we follow is CIS_Distribution_Independent_Linux_Benchmark_v1.1.0-2019, which mandates an approved mainline LSM enforcement.
I want to use Slackware 15 in Linode.

Thanks!

I think also for alot of people, two late sections in the Tomoyo manual might be particularly interesting:
Reinforced authentication (SSH):
https://tomoyo.osdn.jp/2.6/chapter-12.html.en
Securing Apache with mod_tomoyo module:
https://tomoyo.osdn.jp/2.6/chapter-13.html.en

Either as use case examples or specific often used scenarios where it might be particularly interesting to a wide range of users. Meaning for example that you might use Tomoyo for ONLY such a thing, and nothing else, or whatever preference one might have.

Trihexagonal · 02-24-2023, 11:45 PM

I was going to post about this several months ago but decided not to, having had limited posting privileges here for some time.

But here ya go, from the Kali Linux 2022.4 box I'm using now:

Code:

[    0.187456] LSM: Security Framework initializing
[    0.187474] Yama: disabled by default; enable with sysctl kernel.yama.*
[    0.187524] AppArmor: AppArmor initialized
[    0.187527] TOMOYO Linux initialized