–build mode

“ is a Python script that can be used to manage the AppCL LSM extended attributes and security policies. The tool is currently located at: ‘/appcl-lsm/security-config/tools/’ in the project repository.” – now has a ‘build mode’, that can be started against a file (–file option) or a complete directory (–dir option). Knowledge of the AppCL LSM attribute format (as discussed in the post ‘Default ‘DENY’ behaviour‘), nor the pathname of an application is required. Figure 1.0 shows build mode against a file (test3).

The user first enters the application name, which then finds the path for the binary applications matching the application name. Then the user enters the permission to grant the application.

Multiple applications can be restricted by adding additional programs to the attribute. Finally build mode checks whether the user wants to enable default DENY behaviour to DENY all other actions by default. then sets the attribute to the file specified and sets up the security information on the inode.

Figure 1.0 – file build mode

Screen Shot 2016-03-27 at 16.43.57

Figure 2.0 shows build mode against a complete directory (testdir/). The same process as with a file is completed, except sets the attribute to all files within the specified directory.

Figure 2.0 – directory build mode

Screen Shot 2016-03-27 at 16.46.22

‘Build mode’ makes the job of setting AppCL LSM attributes to files/directories simpler. If the required pathname is known and the AppCL extended attribute format is known then the ‘–set’ option can still be used to set the attributes. The ‘–get’ and ‘–remove’ options are still used to view and remove the AppCL LSM attributes.

As well as the long argument options (–file, –dir, –set, –get, –remove, –build), short switches (-f, -d, -v, -g, -x, -b) can be used, this is detailed in the help page ( –help/-h).

To view the public git for this project visit:

Continue to see the development blog page for updates regarding the project progress/development blog.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s