[rsbac] SERACH request on DEV target

Orosz Tamás pingtomi at pingtomi.hu
Thu Sep 18 21:06:25 CEST 2008


Hi all,

I got an error message, when I try to run my own sh script. This script
uses some commands, for example "find".  The error message is:

0000012064|check_comp_rc(): pid 465296960 (find), owner 65534, rc_role
0, DEV rc_type 0, request SEARCH -> NOT_GRANTED!
<6>0000012065|rsbac_adf_request(): request SEARCH, pid 3764, ppid 3763,
prog_name find, prog_file /usr/bin/find, uid 65534, audit uid 400,
target_type DEV, tid block 07:05, attr none, value none, result
NOT_GRANTED by RC ACL

Now, my problem is, I did not found SEARCH request on DEV targets, so I
can not allow this request. I really need to allow this process to
collect data correctly, but RC and ACL blocks it. Do you have any idea?

I'm running RSBAC 1.3.8 with pre-patched kernel 2.6.24.3.

Thanks for your help,

Tamas


More information about the rsbac mailing list