grsecurity-2.0-pre5-2.4.21.patch - hardlinks broken?

Submit your RBAC policies or suggest policy improvements

grsecurity-2.0-pre5-2.4.21.patch - hardlinks broken?

Postby darko » Thu Jun 12, 2003 8:35 am

Hi!

While using this patch, with linux-2.4.21-rc8, I've come across a weird problem, I don't know if I'm doing something wrong, or if it is an actual acl system bug.

I keep getting this line in the logs:

denied link of /var/lib/dhcp/dhcpd.leases to /var/lib/dhcp/dhcpd.leases~ by (dhcpd:14819) uid/euid:0/0 gid/egid:0/0, parent (initlog:11002) uid/euid:0/0 gid/egid:0/0

this is my acl for dhcpd:

subject /usr/sbin/dhcpd oX
/var/run/dhcpd.pid wcd
/var/run
/var/lib/dhcp rwcd
/lib rx
/etc r
/dev/log rw
/dev/null rw
/usr/share r
/ h
/usr/sbin x
-CAP_ALL
+CAP_NET_BIND_SERVICE
+CAP_NET_RAW

In my default acl, /tmp is rwcd, and I have the same problem.

% cd /tmp
% touch somefile
% ln somefile somelink
ln: creating hard link `somelink' to `somefile': Permission denied

denied link of /tmp/somefile to somelink by (ln:27833) uid/euid:0/0 gid/egid:0/0, parent (bash:4122) uid/euid:0/0 gid/egid:0/0

Am I doing something wrong with the acls?

Best regards,
João
darko
 
Posts: 9
Joined: Thu Jun 12, 2003 8:22 am

Postby spender » Thu Jun 12, 2003 10:56 am

You did it correctly. The problem was my error. I've updated CVS and fixed it in the patch available on the site. Thanks for catching that.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to RBAC policy development

cron