maemo.org - Talk - View Single Post - Chroot Scripts for Harmattan Open Mode

rainisto	2012-03-08 , 07:50
Posts: 1,067 \| Thanked: 2,383 times \| Joined on Jan 2012 @ Finland	#25

Originally Posted by qole

Since the primary problem is that Aegis blocks the running of all unsigned binaries, and the chroot is all unsigned binaries, you would have to disable Aegis entirely. At which point, it is the same as Open Mode.

Well that is not true, you don't have to disable aegis entirely by echo 0.

Its enough just to echo 0x25 > /sys/kernel/security/validator/enabled

And then all unsigned binaries run just fine (and it also removes source origin check errors that above post has). Of course you first need to insmod kernel module which removes the seal bit so you can write to that file.

Quote & Reply |

The Following User Says Thank You to rainisto For This Useful Post:
itsnotabigtruck