Page 2 of 3 1 2 3
Reply
Thread Tools
itsnotabigtruck is offline itsnotabigtruck
2012-03-12 , 21:31
Posts: 245 | Thanked: 915 times | Joined on Feb 2012
#11
Originally Posted by coderus View Post
okay, thanks for explain.
Code:
/sys/kernel/security/validator # ls
cache     devorig   enabled   enforce   flush     hashlist  modlist
/sys/kernel/security/validator # cat enforce
0x7
/sys/kernel/security/validator # cat enabled
0x1e7
what should i change?

and, i have another request.
can you enable AEGIS_FIXED_ORIGIN with inception? it says ".. allowed only in open mode.."
It's possible to replace aegis-install using INCEPTION and re-enable that, but I wanted to make the basic INCEPTION install as minimal as possible. Also, due to the "system metapackage" (mp-harmattan-x-pr) locking everything to a particular version, customizing system packages in a "clean" fashion is a bit tricky.

However, there's really no need for AEGIS_FIXED_ORIGIN under normal circumstances - incept is more secure and exists specifically for this sort of thing.
__________________
 

The Following User Says Thank You to itsnotabigtruck For This Useful Post:
coderus's Avatar
coderus is offline coderus
2012-03-12 , 21:46
Posts: 6,436 | Thanked: 12,700 times | Joined on Nov 2011 @ Ängelholm, Sweden
#12
oh, of course, sorry, forget about it, just tried to make it as usual. all working.
 
legoman666 is offline legoman666
2012-03-15 , 02:42
Posts: 185 | Thanked: 103 times | Joined on Aug 2008
#13
Edit: I'm dumb.

Code:
/usr/sbin # ./aegisctl --really -d
+ertxk,-sdaz
/usr/sbin # echo 1050000 > /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
/usr/sbin # cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
1000000
Why won't my changes save?
Last edited by legoman666; 2012-03-15 at 02:56.
 
itsnotabigtruck is offline itsnotabigtruck
2012-03-15 , 03:05
Posts: 245 | Thanked: 915 times | Joined on Feb 2012
#14
Originally Posted by legoman666 View Post
Edit: I'm dumb.

Code:
/usr/sbin # ./aegisctl --really -d
+ertxk,-sdaz
/usr/sbin # echo 1050000 > /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
/usr/sbin # cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
1000000
Why won't my changes save?
I'm not sure what's preventing you from modifying that parameter, but it's not Aegis - if it were, you'd receive an "Operation not permitted" (EPERM) error, rather than seeing nothing happen. Static data file protection isn't used so much in Harmattan - it's mostly for executables (use @e to enter permissive mode for that).

Also, I should add a warning to the OP to make sure everyone is aware that if you turn Aegis enforcement off, then modify a file, things will seem to work - until you reboot, because Aegis wasn't updated with the hashes of the updated files. This is the main reason some of the options require the "--really" switch, as it can be terribly easy to MALF your phone if you aren't careful.
__________________
 
rainisto is offline rainisto
2012-03-15 , 07:01
Posts: 1,067 | Thanked: 2,383 times | Joined on Jan 2012 @ Finland
#15
Originally Posted by legoman666 View Post
Edit: I'm dumb.

Why won't my changes save?
Yes you are, if you read cpufreq kernel sources, you can easily see why its not setting it over the policy value. And its quite easy to do a custom kernel module which increases the policy limits.
 

The Following User Says Thank You to rainisto For This Useful Post:
coderus's Avatar
coderus is offline coderus
2012-03-15 , 08:05
Posts: 6,436 | Thanked: 12,700 times | Joined on Nov 2011 @ Ängelholm, Sweden
#16
so, can you make --hashrebuild option, which regenerates hashes for changed files? Or it impossible?
 
m4r0v3r is offline m4r0v3r
2012-04-14 , 15:40
Posts: 1,746 | Thanked: 1,832 times | Joined on Dec 2010
#17
aegisctl: Operation not permitted (do you have the right credentials?)

i have incepted properly, and using the incept to install and in an opensh but it just won't work any ideas?
 
revdns is offline revdns
2012-04-15 , 14:15
Posts: 34 | Thanked: 7 times | Joined on Apr 2012
#18
I have the same error like m4r0v3r.
 
revdns is offline revdns
2012-04-15 , 18:10
Posts: 34 | Thanked: 7 times | Joined on Apr 2012
#19
m4r0v3r,
# devel-su -c /usr/sbin/pasiv
# /usr/sbin/incept opensh_1.00_armel.deb
# /usr/sbin/incept aegisctl_1.2_armel.deb
# opensh
# /usr/sbin/aegisctl -k

Works for me now
Last edited by revdns; 2012-04-17 at 14:51.
 
Dragoss91 is offline Dragoss91
2012-04-21 , 21:15
Posts: 617 | Thanked: 338 times | Joined on Mar 2011
#20
Originally Posted by revdns View Post
m4r0v3r,
# devel-su -c /usr/sbin/pasiv
# /usr/sbin/incept opensh_1.00_armel.deb
# /usr/sbin/incept aegisctl_1.2_armel.deb
# opensh
# /usr/sbin/aegisctl -k

Works for me now
Still doesn't work for me

RM696-07-1_PR_001:/usr/sbin# aegisctl -s
aegisctl: Operation not permitted (do you have the right credentials?)

overclocking works fine ...
__________________
N9 and N900 , the beauty and the beast
Last edited by Dragoss91; 2012-04-21 at 21:34.
 

The Following User Says Thank You to Dragoss91 For This Useful Post:
Reply
Page 2 of 3 1 2 3

Tags
aegisctl, enforce, harmattan, inception, permissive

« Previous Thread | Next Thread »

 
Forum Jump


All times are GMT. The time now is 11:31.

Contact Us - Home - Archive - Top