[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] lcap, /dev/mem and CAP_SYS_RAWIO
- Subject: Re: [cobalt-security] lcap, /dev/mem and CAP_SYS_RAWIO
- From: Michael Stauber <cobalt@xxxxxxxxxxxxxx>
- Date: Tue, 28 Aug 2001 15:13:07 +0200 (CEST)
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Hi Stu,
> You have CAP_SYS_RAWIO set? Can you still run tripwire, snort, tcpdump etc.?
No! I just run it with the basic options:
/sbin/lcap CAP_SYS_MODULE
I never tried it with CAP_SYS_RAWIO, as that seemed a little to risky for
my taste.
Regards,
Michael Stauber
SOLARSPEED.NET