Thread: [Announce] aegisctl - control Aegis settings from the comfort of your own terminal
View Single Post
itsnotabigtruck is offline itsnotabigtruck
2012-03-12 , 21:31
Posts: 245 | Thanked: 915 times | Joined on Feb 2012
#11
Originally Posted by coderus View Post
okay, thanks for explain.
Code:
/sys/kernel/security/validator # ls
cache     devorig   enabled   enforce   flush     hashlist  modlist
/sys/kernel/security/validator # cat enforce
0x7
/sys/kernel/security/validator # cat enabled
0x1e7
what should i change?

and, i have another request.
can you enable AEGIS_FIXED_ORIGIN with inception? it says ".. allowed only in open mode.."
It's possible to replace aegis-install using INCEPTION and re-enable that, but I wanted to make the basic INCEPTION install as minimal as possible. Also, due to the "system metapackage" (mp-harmattan-x-pr) locking everything to a particular version, customizing system packages in a "clean" fashion is a bit tricky.

However, there's really no need for AEGIS_FIXED_ORIGIN under normal circumstances - incept is more secure and exists specifically for this sort of thing.
__________________
 

The Following User Says Thank You to itsnotabigtruck For This Useful Post: