[rsbac] DAZ on Gentoo

[kang]

Gergely Lónyai wrote:
> Hi,
>
> I setup the DAZ-Clamav by rsbac-wiki but it not work:
>
> # dmesg
> general protection fault: 0000 [#1]
> CPU:    0
> EIP:    0060:[<c0455d2b>]    Not tainted VLI
> EFLAGS: 00010246   (2.6.23-rsbac-r1-rsbac #1)
> EIP is at dazuko_get_value+0x3b/0x190
> eax: ffffff00   ebx: c078cd33   ecx: d6b75e1c   edx: ffffffff
> esi: a8bcf180   edi: a8bcf180   ebp: e62f5ce0   esp: d6b75dec
> ds: 0068   es: 0068   fs: 0000  gs: 0033  ss: 0068
> Process clamd (pid: 14568, ti=d6b74000 task=e771b030 task.ti=d6b74000)
> Stack: d6b75e20 a8bcf180 c0574099 d6b75e1c 0000000e 0000000e a8bcf180 e62f5ce0 
>        c04538cd 00000010 00000000 c04ae20b 00000000 3d41520a 34313433 32373738 
>        00000038 00000084 00000000 c04b3140 00000001 c07d1720 0000000e e62f5ce0 
> Call Trace:
>  [<c0574099>] __copy_from_user_ll+0x19/0x30
>  [<c04538cd>] linux_dazuko_device_write+0x4d/0xc0
>  [<c04ae20b>] do_filp_open+0x4b/0x60
>  [<c04b3140>] chrdev_open+0x0/0x120
>  [<c04af977>] vfs_write+0x147/0x5a0
>  [<c0492710>] get_page_from_freelist+0x70/0xc0
>  [<c04927b3>] __alloc_pages+0x53/0x300
>  [<c0410c00>] do_page_fault+0x1d0/0x690
>  [<c0402c18>] restore_all+0x0/0x18
>  [<c04afe81>] sys_write+0x41/0x70
>  [<c0402bf2>] syscall_call+0x7/0xb
>  =======================
> Code: 85 c9 89 4c 24 0c 0f 84 1f 01 00 00 85 c0 c7 01 00 00 00 00 0f 94 c2 85 f6 0f 94 c0 09 d0 ba ff ff ff ff a8 01 0f 85 00 01 00 00 <80> 3e 00 89 f2 74 4c 0f b6 2b 89 e8 89 df 89 d6 84 c0 0f 84 f2 
> EIP: [<c0455d2b>] dazuko_get_value+0x3b/0x190 SS:ESP 0068:d6b75dec
>
> I read a resolv on dazuko faq: 'You will need to try to re-configure Dazuko with an additional option --sct-readonly.' How to enable this option in gentoo's rsbac-sources?
>
> Aleph
> _______________________________________________
> rsbac mailing list
> rsbac at rsbac.org
> http://www.rsbac.org/mailman/listinfo/rsbac
>   
Please use latest sources from rsbac.org, Gentoo stopped supporting
RSBAC at the moment,


kang