FreeBSD trusted execution system: beta testers wanted

Oleg Palij o.palij at dp.uz.gov.ua
Tue Mar 15 22:54:23 PST 2005


Hi!

Thanks for developing such interesting feature :) !

But I have some problems, which I cant understand.

# sysctl security.mac.chkexec.enforce=0 
security.mac.chkexec.enforce: 1 -> 0

# setfhash /usr/local/sbin/logrotate
# getfhash /usr/local/sbin/logrotate
/usr/local/sbin/logrotate: sha1 78513a038cd9416f2be710b6732369b96874b364

# sysctl security.mac.chkexec.enforce=1 
security.mac.chkexec.enforce: 0 -> 1

# /usr/local/sbin/logrotate
bash: /usr/local/sbin/logrotate: Operation not permitted

# getfhash /usr/local/sbin/logrotate 
/usr/local/sbin/logrotate: sha1 78513a038cd9416f2be710b6732369b96874b364

How can I see what exactly goes wrong ???

Oleg.


More information about the freebsd-security mailing list