Active Topics
-
Firefox with Leste (5)
to Maemo 7 / Leste by teroyk - 4 days, 9 hrs ago -
Handbook (2)
to Maemo 7 / Leste by teroyk - 5 days, 8 hrs ago - more...
| The Following 39 Users Say Thank You to itsnotabigtruck For This Useful Post: | ||
-Tyler-, AlMehdi, ammyt, Arie, banong, Bundyo, Creamy Goodness, Dave999, death_jax, don_falcone, Hurrian, ibrakalifa, jalyst, jberezhnoy, koe, kojacker, lkravovicz, lorenzo, MaddogG, Maemomd, Maj3stic, MaKenZi, Manatus, MartinK, MFaroTusino, MohammadAG, mscion, munozferna, pcfe, qole, rcolistete, Schturman, superjunior, TeHeR, thp, TMavica, wicket, YavkatA, ZogG | ||
|
2012-03-12
, 19:08
|
|
Posts: 1,539 |
Thanked: 1,604 times |
Joined on Oct 2011
@ With my N9
|
#3
|
Installed working well.
__________________
Arie|www.everythingn9.com|Nokia N9 64GB x2|Nokia N950
@everythingn9
Temporary Inception Fix
Times Banned from TMO: 4
Arie|www.everythingn9.com|Nokia N9 64GB x2|Nokia N950
@everythingn9
Temporary Inception Fix
Times Banned from TMO: 4
|
|
2012-03-12
, 19:25
|
|
Posts: 245 |
Thanked: 915 times |
Joined on Feb 2012
|
#4
|
Originally Posted by coderus
The main benefit is that it solves the problem of the "source identifier check": the check that prevents you from running just any executable with any privilege. Normally, you can't just run anything from opensh - only programs provided by Nokia or installed through incept are allowed. The same problem applies with vanilla/stock open mode - it's not only an INCEPTION problem.
please explain, what is profit here? more real samples, please.
With aegisctl, this behavior can be controlled at the flick of a switch.
Also, I added a few more usage examples to the OP.
__________________
|
|
2012-03-12
, 19:35
|
|
Posts: 92 |
Thanked: 16 times |
Joined on Jun 2011
@ Sacramento, CA USA
|
#5
|
Can I get debian finaly, and run OpenOffice?
If yes...how?
Thanks
If yes...how?
Thanks
 |
|
2012-03-12
, 19:38
|
|
Posts: 6,436 |
Thanked: 12,699 times |
Joined on Nov 2011
@ Ängelholm, Sweden
|
#6
|
okay, i see, will be useful for launching binaries.
can i use it without inception but in openmode kernel with patched aegis and wiped /etc/aegisfs.d folder?
or it will be useless? or maybe some test to be sure?
can i use it without inception but in openmode kernel with patched aegis and wiped /etc/aegisfs.d folder?
or it will be useless? or maybe some test to be sure?
| The Following User Says Thank You to coderus For This Useful Post: | ||
|
|
2012-03-12
, 19:38
|
|
Moderator |
Posts: 5,320 |
Thanked: 4,464 times |
Joined on Oct 2009
|
#7
|
Originally Posted by itsnotabigtruck
My mem must be failing me but I thought stuff like source identifier check was basically a non-issue in vanilla/stock open-mode?
The same problem applies with vanilla/stock open mode - it's not only an INCEPTION problem.
Man I really need to find some time to go back a re-read everything, so much happening in the last few months.
|
|
2012-03-12
, 19:53
|
|
Posts: 245 |
Thanked: 915 times |
Joined on Feb 2012
|
#8
|
Originally Posted by coderus
Don't use this with a patched kernel - it has a hardcoded offset based on the stock PR1.2 kernel and changing the kernel could cause aegisctl to crash your system.
okay, i see, will be useful for launching binaries.
can i use it without inception but in openmode kernel with patched aegis and wiped /etc/aegisfs.d folder?
or it will be useless? or maybe some test to be sure?
Originally Posted by jalyst
"Vanilla" open mode basically gives you the same type of access as INCEPTION - you just don't need incept to install privileged packages. However, like with INCEPTION, there aren't any changes in Aegis enforcement unless you make those changes yourself. While I stated in the OP that INCEPTION is required for this, it also works if you use open mode and the stock kernel.
My mem must be failing me but I thought stuff like source identifier check was basically a non-issue in vanilla/stock open-mode?
Man I really need to find some time to go back a re-read everything, so much happening in the last few months.
__________________
Last edited by itsnotabigtruck; 2012-03-12 at 21:06.
|
|
2012-03-12
, 19:57
|
|
Posts: 1,067 |
Thanked: 2,383 times |
Joined on Jan 2012
@ Finland
|
#9
|
Originally Posted by coderus
okay, i see, will be useful for launching binaries.
can i use it without inception but in openmode kernel with patched aegis and wiped /etc/aegisfs.d folder?
or it will be useless? or maybe some test to be sure?
with patched openmode kernel you can freely write to /sys/kernel/security/validator/enabled, so you really don't need this as you can edit the modes without it.
| The Following User Says Thank You to rainisto For This Useful Post: | ||
|
|
2012-03-12
, 20:11
|
|
Posts: 6,436 |
Thanked: 12,699 times |
Joined on Nov 2011
@ Ängelholm, Sweden
|
#10
|
okay, thanks for explain.
what should i change?
and, i have another request.
can you enable AEGIS_FIXED_ORIGIN with inception? it says ".. allowed only in open mode.."
Last edited by coderus; 2012-03-12 at 20:50.
Code:
/sys/kernel/security/validator # ls cache devorig enabled enforce flush hashlist modlist /sys/kernel/security/validator # cat enforce 0x7 /sys/kernel/security/validator # cat enabled 0x1e7
and, i have another request.
can you enable AEGIS_FIXED_ORIGIN with inception? it says ".. allowed only in open mode.."
Last edited by coderus; 2012-03-12 at 20:50.
 |
| Tags |
| aegisctl, enforce, harmattan, inception, permissive |
«
Previous Thread
|
Next Thread
»
|
All times are GMT. The time now is 19:33.
control Aegis settings from the comfort of your own terminal
aegisctl makes it easy to take control and modify the Aegis enforcement bits on your incepted N9. This has many practical uses:
aegisctl is built around an adaptation of javispedro's work on the unseal.ko kernel module.
Run aegisctl -? for usage instructions.
WARNING: This program is compatible only with PR1.2 and PR1.3 firmware (including beta versions). aegisctl has only been tested with the "stock" Nokia kernels, and might not work properly on customized third-party kernels.
NOTE: This must be installed using the incept utility provided with INCEPTION. Additionally, you must have opensh or a similar utility installed so that you can run aegisctl with the permissions required to change Aegis settings.
Install package: aegisctl_1.3_armel.deb
Source package: aegisctl_1.3.dsc aegisctl_1.3.tar.gz
License: Contains GPL2, WTFPL, and BSD code
More info in the copyright file
Calendarrr | ad-hac | sparsify | aegisctl
MilkyTracker | Mosh
Firmware Flashing Guide
Last edited by itsnotabigtruck; 2012-07-03 at 16:12.