socket(2,2,0) and UNIX /dev/log socket

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

socket(2,2,0) and UNIX /dev/log socket

Postby ummajera » Tue Jul 15, 2003 3:11 pm

Hi,

I appear to be stuck a bit. How can I allow access to a unix socket like /dev/log?

And what is socket (2,2,0) and how do I allow access to it if I need to?

Thanks,
Adam
ummajera
 
Posts: 4
Joined: Tue Jun 03, 2003 7:09 pm

Postby spender » Tue Jul 15, 2003 4:09 pm

to be able to connect to a unix socket, you need to give "rw" permissions to the path of the socket.

socket(2,2,0) would be "dgram ip".

The first number is the address family. For the ACL system we only deal with AF_INET. The second number is the socket type: stream, dgram, raw, etc. The third number is the protocol: ip, tcp, udp, etc.

you can look up the numbers in /usr/include/bits/socket.h
for the address family and socket types, and /etc/protocols for the protocols.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to grsecurity support

cron