A little patch - init security level and MAC categories and a


From: janos.milus@dataware.debis.hu
Subject: A little patch - init security level and MAC categories and a
Date: Fri, 12 Jan 2001 15:56:32 +0100

Next Article (by Date): Re: problems with 2.4.0 "John Huttley"
Previous Article (by Date): Re: Logging documentation Jörgen Sigvardsson
Next in Thread: Re: A little patch - init security level and MAC categories and a janos.milus@dataware.debis.hu
Articles sorted by: [Date] [Author] [Subject]


--0__=xxMynLjbQZknAWkQQfsBvjIteqLQYtW2i7OUkqfnJyhiG5z97mN41inG
Content-type: text/plain; charset=us-ascii
Content-Disposition: inline



There is a little bug when process init registering in the version
1.1.1-pre1.
Init got the default MAC categories and the default security level, not the
owner's (root's) security level and categories.
The patch is in attach against aci_data_structures.c
With this I can boot and log in to my computer, where the root (/)
directory
has more MAC categories.

The question is: how can I set the MAC categories to a device, wich has
major/minor
numbers but has no inode under /dev ? For example the proc is not
mountable,
because it has default security level and categories.
(See attached file: patch)

--0__=xxMynLjbQZknAWkQQfsBvjIteqLQYtW2i7OUkqfnJyhiG5z97mN41inG
Content-type: application/octet-stream; 
	name="patch"
Content-Disposition: attachment; filename="patch"
Content-transfer-encoding: base64
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--0__=xxMynLjbQZknAWkQQfsBvjIteqLQYtW2i7OUkqfnJyhiG5z97mN41inG--

-
To unsubscribe from the rsbac list, send a mail to
majordomo@rsbac.org with
unsubscribe rsbac
as single line in the body.

Next Article (by Date): Re: problems with 2.4.0 "John Huttley"
Previous Article (by Date): Re: Logging documentation Jörgen Sigvardsson
Next in Thread: Re: A little patch - init security level and MAC categories and a janos.milus@dataware.debis.hu
Articles sorted by: [Date] [Author] [Subject]


Go to Compuniverse LWGate Home Page.