Re: ACL different between kernel 3.0.8 and 3.2.9

Yes, this bug was solved with 1.4.6 version release, so call to
READ_WRITE_OPEN is the correct and then followed by a READ (or WRITE)
Request access to the content of the file and not just a READ, WRITE
call without the former one.

The trouble were in a modification in the open call by kernel developers
unknown to rsbac developers at first time that made all open calls to go
to READ instead READ_OPEN calls. Since READ_WRITE_OPEN is a open(O_RDWR)
call I suppose that this scenary applies to this request too.


On 05/03/12 19:17, Jens Kasten wrote:
> Ok tanks, last time I was not following the list.
> So than I think the latest kernel is more correct.
> 
> Am Montag, den 05.03.2012, 16:26 +0100 schrieb Javier Juan Martínez
> Cabezón:
> 
> 
> 
> 
> Maybe it's related with the open BUG that appeared few months ago, that
> OPEN calls went to READ requests. Maybe the same happened with
> READ_WRITE_OPEN calls..
> 
> 
> 
> 
> On 05/03/12 08:15, Jens Kasten wrote:
>>>> Hi list,
>>>>
>>>> I have an ACL setup on my homedirectory.
>>>> This setup was using with kernel 3.0.8 and now I switch to kernel 3.2.9.
>>>> With the latest kernel some ACL rules are missing.
>>>>
>>>> This is an example output from kernel 3.2.9:
>>>> Mon Mar  5 01:39:27 2012 :<6>0000004202|rsbac_adf_request(): request
>>>> READ_WRITE_OPEN, pid 3503, ppid 1, prog_name xulrunner-stub,
>>>> prog_file /usr/lib/xulrunner-1.9.1/xulrunner-stub, uid 1000, target_type
>>>> FILE, tid Device 254:01 Inode 675518
>>>> Path /home/users/public/jens/.mozilla/firefox/wxgakmp1.default/places.sqlite, attr open_flag, value 32834, result NOT_GRANTED by ACL
>>>>
>>>>
>>>> Gruesse 
>>>> Jens
>>>>
>>>> _______________________________________________
>>>> rsbac mailing list
>>>> [email protected]
>>>> http://www.rsbac.org/mailman/listinfo/rsbac
> 
_______________________________________________
rsbac mailing list
[email protected]
http://www.rsbac.org/mailman/listinfo/rsbac

> _______________________________________________
> rsbac mailing list
> [email protected]
> http://www.rsbac.org/mailman/listinfo/rsbac

_______________________________________________
rsbac mailing list
[email protected]
http://www.rsbac.org/mailman/listinfo/rsbac