[rsbac] DAZ on Gentoo

[Gergely Lónyai]

From: kang <kang at rsbac.org>
>Gergely Lónyai wrote:
>> Hi,
>>
>> I setup the DAZ-Clamav by rsbac-wiki but it not work:
>>
>> # dmesg
>> general protection fault: 0000 [#1]
>> CPU:    0
>> EIP:    0060:[<c0455d2b>]    Not tainted VLI
>> EFLAGS: 00010246   (2.6.23-rsbac-r1-rsbac #1)
>> EIP is at dazuko_get_value+0x3b/0x190
>> eax: ffffff00   ebx: c078cd33   ecx: d6b75e1c   edx: ffffffff
>> esi: a8bcf180   edi: a8bcf180   ebp: e62f5ce0   esp: d6b75dec
>> ds: 0068   es: 0068   fs: 0000  gs: 0033  ss: 0068
>> Process clamd (pid: 14568, ti=d6b74000 task=e771b030 task.ti=d6b74000)
>> Stack: d6b75e20 a8bcf180 c0574099 d6b75e1c 0000000e 0000000e a8bcf180 e62f5ce0 
>>        c04538cd 00000010 00000000 c04ae20b 00000000 3d41520a 34313433 32373738 
>>        00000038 00000084 00000000 c04b3140 00000001 c07d1720 0000000e e62f5ce0 
>> Call Trace:
>>  [<c0574099>] __copy_from_user_ll+0x19/0x30
>>  [<c04538cd>] linux_dazuko_device_write+0x4d/0xc0
>>  [<c04ae20b>] do_filp_open+0x4b/0x60
>>  [<c04b3140>] chrdev_open+0x0/0x120
>>  [<c04af977>] vfs_write+0x147/0x5a0
>>  [<c0492710>] get_page_from_freelist+0x70/0xc0
>>  [<c04927b3>] __alloc_pages+0x53/0x300
>>  [<c0410c00>] do_page_fault+0x1d0/0x690
>>  [<c0402c18>] restore_all+0x0/0x18
>>  [<c04afe81>] sys_write+0x41/0x70
>>  [<c0402bf2>] syscall_call+0x7/0xb
>>  =======================
>> Code: 85 c9 89 4c 24 0c 0f 84 1f 01 00 00 85 c0 c7 01 00 00 00 00 0f 94 c2 85 f6 0f 94 c0 09 d0 ba ff ff ff ff a8 01 0f 85 00 01 00 00 <80> 3e 00 89 f2 74 4c 0f b6 2b 89 e8 89 df 89 d6 84 c0 0f 84 f2 
>> EIP: [<c0455d2b>] dazuko_get_value+0x3b/0x190 SS:ESP 0068:d6b75dec
>>
>> I read a resolv on dazuko faq: 'You will need to try to re-configure Dazuko with an additional option --sct-readonly.' How to enable this option in gentoo's rsbac-sources?
>>
>> Aleph
>> _______________________________________________
>> rsbac mailing list
>> rsbac at rsbac.org
>> http://www.rsbac.org/mailman/listinfo/rsbac
>>   
>Please use latest sources from rsbac.org, Gentoo stopped supporting
Why? Since when? 

>RSBAC at the moment,
>
>
>kang
>_______________________________________________
>rsbac mailing list
>rsbac at rsbac.org
>http://www.rsbac.org/mailman/listinfo/rsbac