[rsbac] To-do list for 1.2.2

Amon Ott rsbac@rsbac.org
Thu Nov 21 17:47:01 2002


--------------Boundary-00=_1NQXNTD02G1X43NS1C1C
Content-Type: text/plain;
  charset="iso-8859-2"
Content-Transfer-Encoding: 8bit

On Thursday, 21. November 2002 14:23, Czakó Krisztián wrote:
> No. The above test run in a jail started with -i -v -l -a (eg. flags 21).
> 
> Another interesting thing:
> After rebooting the system, when I log in to the jail via ssh and run 
fakeroot
> /bin/bash it works. When I exit from the faked shell and try again, it
> doesn't until a reboot.

OK, we get closer. The flag allow_external_ipc was not applied - sorry for 
that. The first login seemed to create the IPC items in the jail, so they 
were accessible. You can watch /proc/rsbac-info/jails for IPC jail ids.

Please retry with the attached patch. If it works, this will become an 
official bugfix.

Amon.
--
http://www.rsbac.org

--------------Boundary-00=_1NQXNTD02G1X43NS1C1C
Content-Type: text/x-diff;
  charset="iso-8859-2";
  name="rsbac-bugfix-v1.2.1-3.diff"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="rsbac-bugfix-v1.2.1-3.diff"
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==

--------------Boundary-00=_1NQXNTD02G1X43NS1C1C--