[rsbac] RSBAC and Linux distribution upgrades

[Chirag Pandya]

Hello Patrique,
I have upgraded my distributions several times and there have some
minor problems.  Things to watch out for (in my opinion):
 Are you also going up RSBAC versions (e.g. from V 1.2.3 to V 1.2.4). 
I do not know personally what kernel SUSE 9.3 uses.  Only RSBAC V1.2.4
may be available.

If yes:
a.  Note that you may have to update ROLE settings for new boot role,
some compatibilities (GET_STATUS_DATA for SCD 15 for all roles) etc...
b.  See bug issue 0000044 where the rc_set_item is not able to restore
ROLE bitstrings settings from RSBAC V 1.2.3 to V 1.2.4
c.  You will have to recompile and reinstall RSBAC ADMIN tools.  RSBAC
ADMIN tools for V1.2.3 will not work for V1.2.4

I hope this helps.

Kind Regards,
Chirag



On 5/3/05, Patrique Wolfrum <Patrique.Wolfrum at vwl.uni-freiburg.de> wrote:
> Hello,
> 
> we are using SuSE Linux 8.2 on our faculty server, together with RSBAC
> (successful for quite some time :-) ). Since the support from SuSE for
> the 8.2 release will not last for long now that the 9.3 release is out
> (and two years have passed since the 8.2 release), we have decided to
> upgrade to the 9.3 release. In order to minimize my (and those of my
> team-colleagues) headaches concerning the upgrade, I have the following
> questions:
> 
> 1. Are there certain, important points that have to be taken into
> account (special RSBAC backups, ...) ?
> 2. Since (AFAIK) RSBAC saves the settings not according to the filename
> but to the Inode of the file, how can all the settings be played back in
> for the - in the upgrade process - replaced files ?
> 
> Thank you very much in advance.
> 
> Kind regards.
>     Patrique Wolfrum
> 
> --
> Patrique Wolfrum
> Administrator - Fakultätsserver
> 
> Albert-Ludwigs-Universität Freiburg im Breisgau
> Institut für allgemeine Wirtschaftsforschung
> Abteilung für Wirtschaftsinformatik
> Kollegiengebäude II
> Platz der Alten Synagoge
> 79085 Freiburg
> 
> Tel.: 0761 - 203-2397
> 
> _______________________________________________
> rsbac mailing list
> rsbac at rsbac.org
> http://www.rsbac.org/mailman/listinfo/rsbac
>