Problem

msec was heavily modified in Mandriva 2009.1. One might wonder how to change security level in this redesigned msec.

Analysis

There are by default 3 security levels: standard, secure and none. There are also files for defining these levels:

/etc/security/msec/level.none
/etc/security/msec/level.standard
/etc/security/msec/level.secure

These files are used just as templates. One might create own level first by copying one of the above listed files and modifying to desired values:

# cp /etc/security/msec/level.standard /etc/security/msec/level.mylevel
# vi /etc/security/msec/level.mylevel

Edit the file and save it.

Solution

If you wand to use one of the levels, just use the following command:

# msec -f standard

The command above simply forces standard level to be the default one. In fact it just copies the values from /etc/security/msec/level.standard to /etc/security/msec/security.conf – the following command would have probably the same effect:

# cp etc/security/msec/level.standard to /etc/security/msec/security.conf

It works the same with msecperms, i.e. there are the following files:

/etc/security/msec/perm.none
/etc/security/msec/perm.standard
/etc/security/msec/perm.secure

To chose one of the predefined levels do:

# msecperms -f standard

The values from /etc/security/msec/perm.standard are copied to /etc/security/msec/perms.conf (I have no clue why it’s not “perm.conf”?).

References

msec: Changing security level
Tagged on:

Leave a Reply