store | blogs | forums | twitter | facebook | wiki | downloads | support portal
Atomic Secure Linux
It is currently Thu Jul 31, 2014 9:28 am

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 2 posts ] 
Author Message
 Post subject: grsec and Asterisk/CAPI
Unread postPosted: Mon Jun 27, 2005 9:10 am 
Offline
Long Time Forum Regular
Long Time Forum Regular

Joined: Thu Dec 09, 2004 11:19 am
Posts: 2025
Mike/Scott,

What limitations have been imposed in terms of things that need to talk to hardware?

If X is disabled by grsec, does this also mean that I'll have problems with CAPI?

The problem is that I need to harden a server running Plesk and Asterisk (a software-based PBX -- www.asterisk.org). And in order to talk to the outside world without using VoIP, I have a couple of ISDN cards which Asterisk talks to via CAPI.

I'm wondering if the grsec patch will stop this from working in the same way as it stopped X from working?

Admittedly this server won't be accessible to the public over anything except http, https, 5060 and some RTP on ports above 1000, but a weakness in any php script I might write, or a flaw in Asterisk itself (which currently runs as root!) would make it very vulnerable.

I'm working to get Asterisk to run as another (unprived) user, and I'll be a lot happier once I do so. But I'd still like a grsec kernel running on this beast.

Faris.

p.s. any chance of a gradm HOWTO/INTRO please? I'm ashamed to admit that I'm not really sure what I should be doing with it.


Top
 Profile  
 
 Post subject:
Unread postPosted: Wed Aug 17, 2005 7:07 pm 
Offline
Long Time Forum Regular
Long Time Forum Regular

Joined: Thu Dec 09, 2004 11:19 am
Posts: 2025
Just to answer my own question, Asterisk hates grsec (as configured as standard). Not surprising, but a big shame really.

Faris.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group