rexec
rexec is a linux 2.4/2.6 patch. Inspired on Cerber's rexec project.
What does it take in ?
- Restriction for allowed chars in programs' arguments and environmental variables.
- Restriction for count, lenght of arguments and environmental variables.
- No execve system.
You can specify the group of users who are allowed to run their own binaries.
- system call logging.
- logging only execve() which vere canceled.
- single group for execve auditing. You can specify the group of users which you want to observe.
(c) Copyright
authn
Hosted by:
