Re: RSBAC and XFree86-4.0.3 ?

From: Amon Ott <ao@rsbac.org>
Subject: Re: RSBAC and XFree86-4.0.3 ?
Date: Thu, 19 Apr 2001 14:35:24 +0200

Next Article (by Subject): RSBAC based distribution. ALT Linux Castle beta 3. Stanislav Ievlev
Previous Article (by Subject): Re: RSBAC and XFree86-4.0.3 ? Fabrice MARIE
Top of Thread: RSBAC and XFree86-4.0.3 ? Fabrice MARIE
Articles sorted by: [Date] [Author] [Subject]

On Don, 19 Apr 2001 Stanislav Ievlev wrote:
> 
> Amon Ott wrote:
> 
> > On Don, 19 Apr 2001 Fabrice MARIE wrote:
> > 
> >> I'm trying to run Xfree4 while under an RSBAC enabled
> >> kernel (2.4.2 with patch-1.1.2pre2, rsbac-v1.1.2pre2 and
> >>         rsbac-admin-v1.1.2pre1, using RC,AUTH,ACL modules & support
> >>         for X compiled in).
> >> 
> >> However, the access is denied with the following message :
> >> 
> >> ---
> >> Apr 19 14:27:23 fabrice kernel: rsbac_adf_request():
> >>   request GET_STATUS_DATA, caller_pid 1283,
> >>   caller_prog_name X, caller_uid 0, target-type SCD, tid kmem, at
> >>   tr none, value 0, result NOT_GRANTED by ACL
> >> Apr 19 14:27:25 fabrice kernel: rsbac_adf_request():
> >>   request GET_STATUS_DATA, caller_pid 1283,
> >>   caller_prog_name X, caller_uid 0, target-type SCD, tid kmem, at
> >>   tr none, value 0, result NOT_GRANTED by ACL
> >> ---
> >> 
> >> Can someone please explain me this error message ?
> > 
> > 
> > It means that X tries to directly read kernel memory, what is rather bad
> > behaviour. This is not yet covered by X-Support option, but I will add it for
> > compatibility.
> 
> No, We don't need this option for XFree 4.x .

I added it to ACL default settings for root, because the switch name intends
that X runs out of the box, and all other modules do allow it in default
settings. You can always turn the switch or the ACL/RC right off manually.

Amon.
-
To unsubscribe from the rsbac list, send a mail to
majordomo@rsbac.org with
unsubscribe rsbac
as single line in the body.

Go to Compuniverse LWGate Home Page.