Hello. A new version of CaitSith fixes two policy parser regressions. ( caitsith-patch-0.1-20121225.tar.gz can't correctly parse/audit "environ" and "pivot_root" rules.) LSM version of CaitSith seems to be working (though still under testing). Steps are similar to AKARI ( http://akari.sourceforge.jp/1.0/chapter-3.html#3.1 and #3.2) except that "s/akari/caitsith/g" and adding "init=/sbin/caitsith-init" are needed. I'm writing testcases for CaitSith and fixing bugs in CaitSith. Please let me know if you found any problems. caitsith-patch-0.1-20130106.tar.gz MD5: 4444db3c7702bcd2171c110a728f77ff Regards.
TOMOYO
Fork