mainDazuko - Support: sr #104289, Gentoo 2.6.11-rsbac-r2 problems...

 
 

sr #104289: Gentoo 2.6.11-rsbac-r2 problems with dazuko

Submitter:  None
Submitted:  Mon 06 Jun 2005 02:42:34 PM UTC
   
 
Assigned to:  ogman Originator Email:  -email is unavailable-
Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Thu 09 Jun 2005 07:44:50 PM UTC, comment #5: 

Hi,

ON_CLOSE_MODIFIED is not supported by the RSBAC port. Although this event is supported on some of the other ports, it is not very reliable. It would be better for your application to stat() the file to determine if it has been modified or not.

This event may come back when Dazuko is based on DazukoFS. Then it will be possible for reliable results. But right now, at the system call table level, it is not very reliable.

John Ogness <ogman>
Group administrator
Wed 08 Jun 2005 08:38:13 AM UTC, comment #4: 

   Thank you! It worked :) Indeed, I overlooked the major number while configuring my kernel. Now my app works again, although I have some question: under which condition dazuko reports event as DAZUKO_ON_CLOSE_MODIFIED? I'm getting correct reports on rmdir, rm file, open, close, but closing file with changes saved will not report it as separate event but OPEN/CLOSE.
    Thank you, best regards.

Piotr Wanat

Anonymous
Tue 07 Jun 2005 07:40:24 PM UTC, comment #3: 

Hi,

In both .config files you have:

CONFIG_RSBAC_DAZ_DEV_MAJOR=250

But in your post you said that you did:

# mknod -m 666 /dev/dazuko c 254 0

This would create the dazuko device with the wrong major number. You should create it with:

# mknod -m 600 /dev/dazuko c 250 0

(Setting the device to mode 666 is dangerous because it means any application could start doing file access control.)

John Ogness

John Ogness <ogman>
Group administrator
Tue 07 Jun 2005 11:28:27 AM UTC, comment #2: 


    Hello John.

Thank you for the reply.  Yes, I created /dev/dazuko with:
#mknod -m 666 /dev/dazuko c 254 0
I don't use devfs - it's turned off in kernel .config. I use udedv instead, but the problem still exist. Below my dmesg entry follows:

rsbac_do_init(): Initializing RSBAC v1.2.4
rsbac_do_init(): compiled modules: REG DAZ
rsbac_do_init(): Initializing memory slabs
rsbac_do_init(): Registering RSBAC proc dir
rsbac_do_init(): Initializing generic lists
rsbac_list_init(): Registering transaction list.
rsbac_init_debug(): Initializing
rsbac_softmode is set
rsbac_do_init(): reading FD attributes from root dev
rsbac_do_init(): USER DAZ ACI could not be read - generating standard entries!
rsbac_init_daz(): Initializing RSBAC: DAZuko subsystem
dazuko: loaded, version=2.0.6
rsbac_init_um(): Initializing RSBAC: User Management subsystem
rsbac_reg_init(): Initializing RSBAC: REG module and syscall registration
rsbac_do_init(): Forcing consistency check.
rsbac_check(): Device 08:03 has 1 file/dir items (0 removed due to bad inodes)
rsbac_check(): Sum of 1 Devices with 1 fd-items
rsbac_do_init(): Ready.
rsbac_init(): Started rsbacd thread with pid 735
rsbac_init(): Ready.

I'm also attaching my kernel .config file - could you please take a brief look? I don't need any of RSBAC functionality but the dazuko with ALL events reported correctly - especially those related to file/dir changes. Thank you for your help, best regards,

Piotr

Anonymous
Mon 06 Jun 2005 03:52:58 PM UTC, comment #1: 

Hi,

Have you created /dev/dazuko?

If you are using devfs, it won't work. RSBAC loads the DAZ module before devfs is ready and Dazuko fails to load.

I have heard that with udev instead of devfs it works correctly.

John Ogness

John Ogness <ogman>
Group administrator
Mon 06 Jun 2005 02:42:34 PM UTC, original submission:  

   Hello.
   As I need to have all events reported correctly, I compiled a new kernel with DAZ enabled. Although when attempting to run example from /example_c dir in dazuko-2.0.6 distribution, I'm getting this "failed to register..." error. I chose only REG  and DAZ in RSBAC, syslog spits following message:

 rsbac_adf_request(): request READ_ATTRIBUTE, pid 10364, ppid 10363, prog_name attr_get_file_d, prog_file /usr/bin/attr_get_file_dir, uid 0, audit_uid 0, target_type FILE, tid Device 08:03 Inode 459271 Path /install/dazuko-2.0.6/example_c/example, attr daz_scanner, value 4294967295, result NOT_GRANTED (Softmode) by DAZ

   TIA for any help,  regards.

Piotr

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #3997:  config.gz added by None (7KiB - application/x-gzip - gentoo linux-2.6.11-rsbac-r2 .config)
file #3994:  config.gz added by None (7KiB - application/x-gzip - kernel sources .config)

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Follow 4 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2005-07-06 ogman Open/ClosedOpen Closed
2005-06-07 None Attached File- Added config.gz, #142
2005-06-06 ogman Assigned toNone ogman
2005-06-06 None Attached File- Added config.gz, #141

Back to the top

Powered by Savane 3.13-4b48.
Corresponding source code