From owner-freebsd-security@FreeBSD.ORG  Tue Mar 15 20:42:16 2005
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A984A16A52D
	for <freebsd-security@freebsd.org>;
	Tue, 15 Mar 2005 20:42:16 +0000 (GMT)
Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.204])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1C55943D60
	for <freebsd-security@freebsd.org>;
	Tue, 15 Mar 2005 20:42:16 +0000 (GMT)
	(envelope-from vaida.bogdan@gmail.com)
Received: by wproxy.gmail.com with SMTP id 36so5545wra
	for <freebsd-security@freebsd.org>;
	Tue, 15 Mar 2005 12:42:15 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
	s=beta; d=gmail.com;
	h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:references;
	b=EnD0RIFHbMyGFb1+4zz5pa4yFdmPmcQfwTsO1ZHa4G4wHQ6rPuPAWGJ9hN06uoVHS1p380o79ANRPsSPC+CtXOQf6rL3rahhj2f3hM6wAGqkCNoM631DX2sX1aE6V6Ze7Qf1afRDHg0zakXfW2KqA3EXPQnZhk6Jxk1DuAmWHkU=
Received: by 10.38.15.37 with SMTP id 37mr1046926rno;
        Tue, 15 Mar 2005 12:42:15 -0800 (PST)
Received: by 10.38.208.63 with HTTP; Tue, 15 Mar 2005 12:42:15 -0800 (PST)
Message-ID: <12848a3b05031512426bf7664c@mail.gmail.com>
Date: Tue, 15 Mar 2005 22:42:15 +0200
From: vaida bogdan <vaida.bogdan@gmail.com>
To: Tim Kientzle <kientzle@freebsd.org>
In-Reply-To: <4233401A.3040403@freebsd.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
References: <20050311152951.GA90290@freefall.freebsd.org>
	 <4233401A.3040403@freebsd.org>
cc: freebsd-security@freebsd.org
cc: "Christian S.J. Peron" <csjp@freebsd.org>
cc: freebsd-hackers@freebsd.org
Subject: Re: FreeBSD trusted execution system: beta testers wanted
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: vaida bogdan <vaida.bogdan@gmail.com>
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Mar 2005 20:42:16 -0000

Hi, could you explain me how this error is related to mac_chkexec?

(after enforcing, I execute xchat and get:)
/libexec/ld-elf.so.1: /usr/X11R6/lib/libgdk-x11-2.0.so.400: mmap of
entire address space failed: Operation not permitted
(I set chkexec.enforce to 0, run xchat and enforce the policy again
and the error disappears)

It didn't tell me which executable it could not run.



On Sat, 12 Mar 2005 11:16:42 -0800, Tim Kientzle <kientzle@freebsd.org> wrote:
> Christian S.J. Peron wrote:
> > 
> > I have written a trusted execution module and would appreciate if anyone
> could
> > help in testing. This module provides a functionality similar to NetBSD's
> > verified exec mechanism.
> 
> Excellent!
> 
> Sounds like something that could provide a
> lot of additional protection against
> trojans and worms.
> 
> Wish I had time to play with it right now....
> 
> Tim
> 
> _______________________________________________
> freebsd-security@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
>