From: janos.milus@dataware.debis.hu
Subject: A little patch - init security level and MAC categories and a
Date: Fri, 12 Jan 2001 15:56:32 +0100
Next Article (by Author): Re: A little patch - init security level and MAC categories and a janos.milus@dataware.debis.hu
Previous Article (by Author): Problems with kernel inger@linux.ru.net
Next in Thread: Re: A little patch - init security level and MAC categories and a janos.milus@dataware.debis.hu
Articles sorted by: [Date]
[Author]
[Subject]
--0__=xxMynLjbQZknAWkQQfsBvjIteqLQYtW2i7OUkqfnJyhiG5z97mN41inG Content-type: text/plain; charset=us-ascii Content-Disposition: inline There is a little bug when process init registering in the version 1.1.1-pre1. Init got the default MAC categories and the default security level, not the owner's (root's) security level and categories. The patch is in attach against aci_data_structures.c With this I can boot and log in to my computer, where the root (/) directory has more MAC categories. The question is: how can I set the MAC categories to a device, wich has major/minor numbers but has no inode under /dev ? For example the proc is not mountable, because it has default security level and categories. (See attached file: patch) --0__=xxMynLjbQZknAWkQQfsBvjIteqLQYtW2i7OUkqfnJyhiG5z97mN41inG Content-type: application/octet-stream; name="patch" Content-Disposition: attachment; filename="patch" Content-transfer-encoding: base64 NDQyOWE0NDMwCj4gICAgIHN0cnVjdCByc2JhY191c2VyX2xpc3RfaXRlbV90ICogdV9pdGVtX3A7 CjQ2MzBhNDYzMiw0NjQyCj4gLyogU2V0dGluZyB0aGUgTUFDIGNhdGVnb3J5IGFuZCBzZWN1cml0 eSBsZXZlbCBmb3IgdGhlIGluaXQgKi8KPiAgICAgdV9pdGVtX3AgPSBsb29rdXBfdXNlcihSU0JB Q19TWVNBRE1fVUlEKTsKPiAgICAgaWYgKHVfaXRlbV9wKSB7Cj4gICAgICAgIHByb2Nlc3NfYWNp Lm1hY19vd25lcl9jYXRlZ29yaWVzID0gdV9pdGVtX3AtPmFjaS5tYWNfY2F0ZWdvcmllczsKPiAg ICAgICAgcHJvY2Vzc19hY2kubWFjX2N1cnJfY2F0ZWdvcmllcyA9IHVfaXRlbV9wLT5hY2kubWFj X2NhdGVnb3JpZXM7Cj4gICAgICAgIHByb2Nlc3NfYWNpLm93bmVyX3NlY19sZXZlbCA9IHVfaXRl bV9wLT5hY2kuYWNjZXNzX2FwcHI7Cj4gICAgICAgIHByb2Nlc3NfYWNpLmN1cnJlbnRfc2VjX2xl dmVsID0gdV9pdGVtX3AtPmFjaS5hY2Nlc3NfYXBwcjsKPiAgICAgfSBlbHNlIHsKPiAgICAgICAg cHJpbnRrKEtFUk5fV0FSTklORwo+ICAgICAgICAgICAgICAgInJzYmFjX2luaXQoKTogU1lTQURN IHVzZXIgZW50cnkgY291bGQgbm90IGJlIGZvdW5kIGZvciBzZXR0aW5nIHRoZSBpbml0IHJpZ2h0 cyFcbiIpOwo+ICAgICB9CSAgCg== --0__=xxMynLjbQZknAWkQQfsBvjIteqLQYtW2i7OUkqfnJyhiG5z97mN41inG-- - To unsubscribe from the rsbac list, send a mail to majordomo@rsbac.org with unsubscribe rsbac as single line in the body.
Next Article (by Author): Re: A little patch - init security level and MAC categories and a janos.milus@dataware.debis.hu
Previous Article (by Author): Problems with kernel inger@linux.ru.net
Next in Thread: Re: A little patch - init security level and MAC categories and a janos.milus@dataware.debis.hu
Articles sorted by: [Date]
[Author]
[Subject]