[rsbac] GET_STATUS_DATA - SCD/other = NOT_GRANTED

[Rafal Bisingier]

Hi,

I have many entries in log like:
kern.info: rsbac_adf_request(): request GET_STATUS_DATA, pid 3218, ppid
1542, prog_name clamd, prog_file /usr/sbin/clamd, uid 43, audit_uid 43,
target_type SCD, tid other, attr none, value none, result NOT_GRANTED by
JAIL
This one is about clamd and blocking module is JAIL, but I've seen also
other programs (mostly daemons, but also login, ps, bash, tail) with the
same target/request but blocked by RC or ACL
The question is: is this something I shoud fix, or is it normal?
Everything seems to work without problems. If this should be fixed, then
where to look for a reason of this behaviour?
I don't think that granting anyone access to GET_STATUS_DATA of SCD/other
is a good solution, is it?

-- 
Greetings
Rafal Bisingier
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://rsbac.dyndns.org/pipermail/rsbac/attachments/20050525/16c2332a/attachment.bin