Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to master grimoire by Arjan Bouter (1ee36d3373a5c889e3e6fa19bca6aa1debc83448)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Arjan Bouter <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to master grimoire by Arjan Bouter (1ee36d3373a5c889e3e6fa19bca6aa1debc83448)
  • Date: Wed, 7 Sep 2011 07:20:16 -0500

GIT changes to master grimoire by Arjan Bouter <abouter AT sourcemage.org>:

ChangeLog | 3 +++
security/ninja/BUILD | 1 +
security/ninja/DETAILS | 25 +++++++++++++++++++++++++
security/ninja/HISTORY | 3 +++
security/ninja/INSTALL | 3 +++
security/ninja/PRE_BUILD | 4 ++++
security/ninja/init.d/ninja | 37 +++++++++++++++++++++++++++++++++++++
7 files changed, 76 insertions(+)

New commits:
commit 1ee36d3373a5c889e3e6fa19bca6aa1debc83448
Author: Arjan Bouter <abouter AT sourcemage.org>
Commit: Arjan Bouter <abouter AT sourcemage.org>

ninja: new spell, privilege escalation detection and prevention system

diff --git a/ChangeLog b/ChangeLog
index edd8bf8..28fecf3 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,6 @@
+2011-09-07 Arjan Bouter <abouter AT sourcemage.org>
+ * security/ninja: new spell, privilege escalation detection and
prevention system
+
2011-09-07 Ismael Luceno <ismael AT sourcemage.org>
* python-pypi/crecord: new spell, Mercurial extension to
interactively edit commits

diff --git a/security/ninja/BUILD b/security/ninja/BUILD
new file mode 100755
index 0000000..8f58e6d
--- /dev/null
+++ b/security/ninja/BUILD
@@ -0,0 +1 @@
+make
diff --git a/security/ninja/DETAILS b/security/ninja/DETAILS
new file mode 100755
index 0000000..d57357b
--- /dev/null
+++ b/security/ninja/DETAILS
@@ -0,0 +1,25 @@
+ SPELL=ninja
+ VERSION=0.1.3
+ SOURCE="${SPELL}-${VERSION}.tar.bz2"
+ SOURCE_URL[0]=http://forkbomb.org/${SPELL}/src/${SOURCE}
+
SOURCE_HASH=sha512:c35a4019c3796858e2bdea260b444298503b51e4dd71b3efde3b8ebdb42352e027d84844babe23733a60de275349d6904af012fd2d29d9c791e29d24a05b9c59
+SOURCE_DIRECTORY="${BUILD_DIRECTORY}/${SPELL}-${VERSION}"
+ WEB_SITE="http://forkbomb.org/ninja/";
+ LICENSE[0]=GPL
+ ENTERED=20110907
+ SHORT="privilege escalation detection and prevention system"
+cat << EOF
+Ninja is a privilege escalation detection and prevention system for GNU/Linux
+hosts. While running, it will monitor process activity on the local host, and
+keep track of all processes running as root. If a process is spawned with
UID
+or GID zero (root), ninja will log necessary informa- tion about this
process,
+and optionally kill the process if it was spawned by an unauthorized user.
+
+A "magic" group can be specified, allowing members of this group to run any
+setuid/setgid root executable.
+
+Individual executables can be whitelisted. Ninja uses a fine grained
whitelist
+that lets you whitelist executables on a group and/or user basis. This can
+be used to allow specific groups or individual users access to setuid/set-
+gid root programs, such as su and passwd.
+EOF
diff --git a/security/ninja/HISTORY b/security/ninja/HISTORY
new file mode 100644
index 0000000..0d536e5
--- /dev/null
+++ b/security/ninja/HISTORY
@@ -0,0 +1,3 @@
+2011-09-07 Arjan Bouter <abouter AT sourcemage.org>
+ * BUILD, DETAILS, INSTALL, PRE_BUILD: spell created
+ * init.d/ninja: added init script
diff --git a/security/ninja/INSTALL b/security/ninja/INSTALL
new file mode 100755
index 0000000..b6ef7ae
--- /dev/null
+++ b/security/ninja/INSTALL
@@ -0,0 +1,3 @@
+default_install &&
+mkdir -p "${INSTALL_ROOT}/usr/share/doc/$SPELL" &&
+cp -r examples "${INSTALL_ROOT}/usr/share/doc/$SPELL/"
diff --git a/security/ninja/PRE_BUILD b/security/ninja/PRE_BUILD
new file mode 100755
index 0000000..c397692
--- /dev/null
+++ b/security/ninja/PRE_BUILD
@@ -0,0 +1,4 @@
+default_pre_build &&
+cd "${SOURCE_DIRECTORY}" &&
+sedit 's#/local##g' Makefile &&
+sedit 's#/man/#/share/man/#' Makefile
diff --git a/security/ninja/init.d/ninja b/security/ninja/init.d/ninja
new file mode 100755
index 0000000..134676d
--- /dev/null
+++ b/security/ninja/init.d/ninja
@@ -0,0 +1,37 @@
+#!/bin/bash
+
+PROGRAM=/usr/bin/ninja
+ARGS="/etc/ninja/ninja.conf"
+RUNLEVEL=3
+PIDFILE=/var/run/ninja.pid
+NEEDS="+remote_fs"
+
+. /etc/init.d/smgl_init
+
+start () {
+ echo "Releasing ninja..."
+
+ if [ ! -e /etc/ninja/ninja.conf ]; then
+ cp /etc/ninja/default.conf /etc/ninja/ninja.conf
+ fi
+
+ if [ -e $PIDFILE ] ; then
+ echo "Ninja already running"
+ else
+ $PROGRAM $ARGS 2>&1 > /dev/null
+ pidof $PROGRAM > $PIDFILE
+ fi
+
+ evaluate_retval
+
+}
+
+stop() {
+ echo "Catching ninja..."
+ if [ -e $PIDFILE ] ; then
+ kill -9 $(cat $PIDFILE) && rm -f $PIDFILE
+ else
+ echo "Ninja not running"
+ fi
+ evaluate_retval
+}



  • [SM-Commit] GIT changes to master grimoire by Arjan Bouter (1ee36d3373a5c889e3e6fa19bca6aa1debc83448), Arjan Bouter, 09/07/2011

Archive powered by MHonArc 2.6.24.

Top of Page