X in rsbac jail
Jens Kasten <[email protected]> Sun, 13 Jul 2014 11:14:35 +0200
| Newsgroups | gmane.linux.rsbac |
|---|---|
| Message-ID | <[email protected]> |
Hi list, I have setup to start the X environment in a rsbac jail. So far all is working but special function key for laptop does not. But is a new xfce setup so maybe I miss something. Any further ideas would be good. :D Jens _______________________________________________ rsbac mailing list [email protected] http://www.rsbac.org/mailman/listinfo/rsbac
running-processes-in-jail.txt
(text/plain, 29.9 KB)
-------------------------------------------------------------------------------
Thunar Pid: 20009 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
X Pid: 19923 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
alsamixer Pid: 21788 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
at-spi-bus-laun Pid: 20055 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
at-spi2-registr Pid: 20061 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
bash Pid: 20545 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
claws-mail Pid: 21947 Jail Id: 38 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
-------------------------------------------------------------------------------
cron Pid: 6008 Jail Id: 3 Jail Ip: 127.0.0.1
-------------------------------------------------------------------------------
Jail-Flags : allow-dev-read
allow-dev-write
allow-inet-raw
allow-ipc-syslog
Jail-SCD-Modify: rlimit
-------------------------------------------------------------------------------
dbus-daemon Pid: 20058 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
dbus-launch Pid: 19994 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
firefox Pid: 21994 Jail Id: 40 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
Jail-SCD-Get : priority
sysfs
Jail-SCD-Modify: mlock
-------------------------------------------------------------------------------
gconfd-2 Pid: 20204 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
gnome-pty-helpe Pid: 20068 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
gpg-agent Pid: 19659 Jail Id: 23 Jail Ip: 127.0.0.1
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
gvfs-gphoto2-vo Pid: 20086 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
gvfs-udisks2-vo Pid: 20078 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
gvfsd Pid: 20024 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
gvfsd-fuse Pid: 20031 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
gvfsd-network Pid: 20243 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
gvfsd-smb Pid: 20267 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
gvfsd-smb-brows Pid: 20249 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
gvfsd-trash Pid: 20097 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
nm-applet Pid: 20038 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
ntpd Pid: 5935 Jail Id: 2 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-dev-read
allow-dev-write
allow-external-ipc
allow-inet-raw
allow-netlink
Jail-SCD-Modify: capability
clock
time-strucs
-------------------------------------------------------------------------------
panel-2-actions Pid: 20022 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
panel-6-systray Pid: 20020 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
pulseaudio Pid: 20065 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
rklogd Pid: 4881 Jail Id: 1 Jail Ip: 127.0.0.1
-------------------------------------------------------------------------------
Jail-Flags : allow-dev-read
allow-dev-write
allow-external-ipc
Jail-SCD-Get : rsbac-log
-------------------------------------------------------------------------------
scdaemon Pid: 20422 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
sh Pid: 21993 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
slim Pid: 19918 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
ssh Pid: 20636 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
su Pid: 20489 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
syndaemon Pid: 21598 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
vim Pid: 21931 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
xfce4-appfinder Pid: 20469 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
xfce4-panel Pid: 20011 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
xfce4-power-man Pid: 20018 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
xfce4-session Pid: 20001 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
xfce4-terminal Pid: 20014 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
xfconfd Pid: 20003 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
xfdesktop Pid: 20012 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
xfsettingsd Pid: 20013 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
xfwm4 Pid: 20007 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs
-------------------------------------------------------------------------------
xscreensaver Pid: 20053 Jail Id: 26 Jail Ip: 0.0.0.0
-------------------------------------------------------------------------------
Jail-Flags : allow-all-net-family
allow-dev-get-status
allow-dev-read
allow-dev-write
allow-external-ipc
allow-ipc-parent
allow-tty-open
auto-adjust-ip-address
Jail-SCD-Get : priority
rsbac
sysfs
Jail-SCD-Modify: ioports
mlock
priority
rlimit
sysfs