[grsec] grtool 0.1 - A useful tool for grsecurity users

Marc Schiffbauer marc at schiffbauer.net
Tue May 31 07:40:09 EDT 2005


Hi all,

I have written a small bash-tool to handle grsecurity learning logs and
policy files. It has been tested to work with the current 2.1.x
Versions of grsecurity.

Features in this first public release:

  FEATURES:
    * Added command split-policy/s-p:
      Split a policy file generated by gradm
      into several files and put them into a
      directory structure
    * Added command glob-objects/g-o:
      Automatically glob objects that match a
      a given regular expression.
      For example this is useful for changing
      objects in /usr/lib or /lib with version
      extension to a globbed object without
      version to make software upgrades
      possible without having to edit the policy
      afterwards...
    * Added command convert-log/c-l:
      Convert role or subject based learning logs
      to full learning logs so that they can be used
      for a full learning process
    * Added command shrink-log/s-l:
      Eliminate duplicate lines in a learning log to
      make it smaller and speedup learning processes
    * Added global option -h/--help:
      Show a help screen
    * Added global option -n/--nice:
      Nice 'heavy' subprocesses (useful for production
      systems)
    * Added global option -v/--verbose:
      Be verbose and show progress infos
    * Added global option -V/--version:
      Show version information

See grtool man page and the README for more details.

README, tarball, RPM and deb can be found here:

  http://linuxcc.de/grtool/

Debian users can use the following sources.list entry:

  deb http://packman.iu-bremen.de/debian/woody/grtool ./

(Should work for sarge and sid as well)

Feedback is very welcome.

Have fun.

-Marc
-- 
8AAC 5F46 83B4 DB70 8317  3723 296C 6CCA 35A6 4134
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20050531/68913376/attachment.pgp


More information about the grsecurity mailing list