[rsbac] get current role

Amon Ott ao at rsbac.org
Thu Nov 27 16:50:05 CET 2003


On Donnerstag, 27. November 2003 16:46, Amon Ott wrote:
> On Donnerstag, 27. November 2003 16:02, Bencsath Boldizsar wrote:
> > It is not so important, but as far as the "id" is a good way to debug
> > programs, this can also be helpful.
> > (E.g. "Look, this CGI program says it is executed with the user id of
> > www-data, and look, it uses the role "webserver" and so it won't be able
> > to harm anything, ... ...")
> > So it can be  helpful for demonstration and/or debugging.
> > Also, in "RC NOT_GRANTED" error messages it could be helpful to get back
> > the Role that caused the error.
> 
> rsbac_debug_adf_rc shows both role and type at KERN_DEBUG level.

Just to mention: I have just added a
rc_get_item print
command, which shows all info from
rc_get_item backup
in a better human readable form. You can grap the latest admin tool code from 
rsync and copy rc_get_item.c into your 1.2.2 tool dir, it should work.

Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22



More information about the rsbac mailing list