Arch Linux

ezzetabi

Member

Registered: 2006-08-27

Posts: 947

Tomoyo and Skype [SOLVED]

I followed the wiki to sandbox the skype process using tomoyo, but I got some problems.

Tomoyo blocks access to the skype settings directory, I wrote to the mailing list all the
details, please read the email there.
No-one answered yet, anyone has tried following the archwiki instructions? Does it works for you?

Any insight is welcome, thanks.
Paolo

Last edited by ezzetabi (2013-04-03 08:34:52)

the sad clown

Member

From: 192.168.0.X

Registered: 2011-03-20

Posts: 837

Re: Tomoyo and Skype [SOLVED]

If you need to adjust it, just use the domain policy editor.  Switch it to permission mode [2], and observe rule violations that you can then integrate back into your domain policy.  You can read more about how to do that here:

http://tomoyo.sourceforge.jp/2.5/chapter-6.html.en (section 6.6)

This is similar to this suggestion in the wiki:

Then go to /var/log/tomoyo folder and start watching reject_003.log:

tail -f reject_003.log

The output of this command will show you rejected actions for Skype, so you'll be able to add them to domain_policy.conf file if needed.

Only you won't be preventing Skype from functioning while you figure out what behaviors are violating your rule set.

Last edited by the sad clown (2013-03-30 02:53:53)

---

I laugh, yet the joke is on me

ezzetabi

Member

Registered: 2006-08-27

Posts: 947

Re: Tomoyo and Skype [SOLVED]

I seems the main problem was that the file create mode is strict and so you need to change 0666 to 0600-0666 otherwise skype won't be able to create 0600 files. It was confusing as 0666 seems a more permissive rule. I will update the wiki soon or later.

Last edited by ezzetabi (2013-04-03 08:35:06)