Resmgr - Revision history

Jciccone at 01:35, 6 July 2008

2008-07-06T01:35:05Z

← Older revision		Revision as of 01:35, 6 July 2008
Line 136:		Line 136:
	* Installed Libraries: libresmgr.so.{{Resmgr-Version}} pam_resmgr.so		* Installed Libraries: libresmgr.so.{{Resmgr-Version}} pam_resmgr.so
	* Installed Directories:		* Installed Directories:

			[[Category:Security]]

2007-11-03T06:42:27Z

Spelling

← Older revision		Revision as of 06:42, 3 November 2007
Line 79:		Line 79:
	== PAM Rule ==		== PAM Rule ==

	By default most, if not all, of the [[Linux-PAM]] rules include '''system-auth''. By adding '''pam_resmgr.so''' to this file we're ensuring it gets loaded regardless of the service. If you do not want this you can add it to the individual service you wish to grant ~~privleges~~, eg. just the display manager.		By default most, if not all, of the [[Linux-PAM]] rules include '''system-auth''. By adding '''pam_resmgr.so''' to this file we're ensuring it gets loaded regardless of the service. If you do not want this you can add it to the individual service you wish to grant privileges, eg. just the display manager.

	echo "session optional pam_resmgr.so" >> /etc/pam.d/system-auth		echo "session optional pam_resmgr.so" >> /etc/pam.d/system-auth

2007-04-16T19:34:46Z

← Older revision		Revision as of 19:34, 16 April 2007
Line 7:		Line 7:
	----		----

	{{Package-Introduction~~\|Resmgr~~\|Resmgr will provide unprivileged users access to device files via ACLs.\|http://rechner.lst.de/~okir/resmgr/}}		{{Package-Introduction\|Resmgr will provide unprivileged users access to device files via ACLs.\|http://rechner.lst.de/~okir/resmgr/}}

	== Dependencies ==		== Dependencies ==

2007-04-16T19:17:11Z

← Older revision		Revision as of 19:17, 16 April 2007
Line 7:		Line 7:
	----		----

	== Introduction to Resmgr ==		{{Package-Introduction\|Resmgr\|Resmgr will provide unprivileged users access to device files via ACLs.\|http://rechner.lst.de/~okir/resmgr/}}

	Resmgr will provide unprivileged users access to device files via ACLs.

	== Dependencies ==		== Dependencies ==

2007-01-27T17:33:05Z

← Older revision		Revision as of 17:33, 27 January 2007
Line 25:		Line 25:
	Install the package		Install the package

	make install		make install &&
			ln -sfv libresmgr.so.{{Resmgr-Version}} /lib/libresmgr.so

	== Multilib ==		== Multilib ==
Line 38:		Line 39:
	Install the package		Install the package

	make install		make install &&
			ln -sfv libresmgr.so.{{Resmgr-Version}} /lib/libresmgr.so

	=== N32 ===		=== N32 ===
Line 49:		Line 51:
	Install the package		Install the package

	make LIBDIR=~~/usr~~/lib32 PAMDIR=/lib32/security install		make LIBDIR=/lib32 PAMDIR=/lib32/security install &&
			ln -sfv libresmgr.so.{{Resmgr-Version}} /lib32/libresmgr.so

	=== 64Bit ===		=== 64Bit ===
Line 61:		Line 64:
	Install the package		Install the package

	make LIBDIR=~~/usr~~/lib64 PAMDIR=/lib64/security install		make LIBDIR=/lib64 PAMDIR=/lib64/security install &&
			ln -sfv libresmgr.so.{{Resmgr-Version}} /lib64/libresmgr.so

	== Configuring ==		== Configuring ==

2007-01-27T17:24:34Z

Multilib

← Older revision		Revision as of 17:24, 27 January 2007
Line 31:		Line 31:
	=== 32Bit ===		=== 32Bit ===

	~~Todo.~~..		Compile the package:

			sed -i "1i\#include <sys/syslog.h>" pam_resmgr.c &&
			make CC="gcc ${BUILD32}"

			Install the package

			make install

	=== N32 ===		=== N32 ===

	~~Todo.~~..		Compile the package:

			sed -i "1i\#include <sys/syslog.h>" pam_resmgr.c &&
			make CC="gcc ${BUILDN32}"

			Install the package

			make LIBDIR=/usr/lib32 PAMDIR=/lib32/security install

	=== 64Bit ===		=== 64Bit ===

	~~Todo.~~..
			Compile the package:

			sed -i "1i\#include <sys/syslog.h>" pam_resmgr.c &&
			make CC="gcc ${BUILD64}"

			Install the package

			make LIBDIR=/usr/lib64 PAMDIR=/lib64/security install

	== Configuring ==		== Configuring ==

2007-01-27T17:18:07Z

Bootscript

2007-01-27T17:15:27Z

Configuring

← Older revision		Revision as of 17:15, 27 January 2007
Line 42:		Line 42:

	== Configuring ==		== Configuring ==

			A good place to start reading about configuring resmgr would be '''man resmgr.conf''' and man pam_resmgr. The resmgr.conf man page has the following in it:

			''For example, the following statements for the resource class desktop will deny access to users uucp and news, but grant access to everyone in group wheel, and everyone else as long as they're logged in at the console or a local X11 session:

			deny desktop user=uucp \|\| user=news
			allow desktop group=wheel
			allow desktop tty=/dev/tty[0-9]* \|\| tty=:0''

			This would be a good time to edit '''/etc/resmgr.conf''' and set the rules according to your needs.

			== PAM Rule ==

			By default most, if not all, of the [[Linux-PAM]] rules include '''system-auth''. By adding '''pam_resmgr.so''' to this file we're ensuring it gets loaded regardless of the service. If you do not want this you can add it to the individual service you wish to grant privleges, eg. just the display manager.

			echo "session optional pam_resmgr.so" >> /etc/pam.d/system-auth

	=== Bootscript ===		=== Bootscript ===

2007-01-27T17:03:46Z

← Older revision		Revision as of 17:03, 27 January 2007
Line 40:		Line 40:

	Todo...		Todo...

			== Configuring ==

			=== Bootscript ===

			Create the bootscript:

			cat > /etc/rc.d/init.d/resmgrd << "EOF"
			#!/bin/sh
			# Begin $rc_base/init.d/resmgrd

			. /etc/sysconfig/rc
			. ${rc_functions}

			case "${1}" in
			start)
			boot_mesg "Starting resmgrd..."
			loadproc /sbin/resmgrd
			;;

			stop)
			boot_mesg "Stopping resmgrd..."
			killproc /sbin/resmgrd
			;;

			restart)
			${0} stop
			sleep 1
			${0} start
			;;

			status)
			statusproc /sbin/resmgrd
			;;

			*)
			echo "Usage: ${0} {start\|stop\|restart\|status}"
			exit 1
			;;
			esac

			# End $rc_base/init.d/resmgrd
			EOF

			Link it into the runlevels:

			for link in /etc/rc.d/rc{{0,1,6}.d/K50,{2,3,4,5}.d/S15}resmgrd; do
			ln -sfv ../init.d/resmgrd $link;
			done

	== Contents ==		== Contents ==

2007-01-27T16:50:42Z

Introduction to Resmgr

← Older revision		Revision as of 16:50, 27 January 2007
Line 9:		Line 9:
	== Introduction to Resmgr ==		== Introduction to Resmgr ==

	~~<Package Needs Description>~~		Resmgr will provide unprivileged users access to device files via ACLs.

	== Dependencies ==		== Dependencies ==