[rsbac] How to set target_type FILE Path socket:/[25924]

Thomas Mueller news-exp-jun04 at tmueller.com
Thu Apr 29 12:47:12 CEST 2004


I reduced the FD rights of every process to its required minimum using the
RC model. Now I have only left for example:

Apr 29 12:15:28 geht-schon kernel: rsbac_adf_request(): request
GET_STATUS_DATA, pid 539, ppid 1, prog_name exim4, uid 105, target_type
FILE, tid Device 00:04 Inode 25924 Path socket:/[25924], attr none, value
0, result NOT_GRANTED by GEN RC

How can I set these rights?
attr_set_file_dir FD socket:/ ...

'target_type FILE' means I have to set the rights using 'attr_set_file_dir
FD' ?


http://www.tmueller.com for pgp key (95702B3B)

More information about the rsbac mailing list