Re: AUTH

On Thu, Mar 29, 2012 at 06:28:00AM +0200, Jens Kasten wrote:
> Mar 29 05:20:54 jaschtschik-pc kernel: 0000001371|rsbac_adf_request():
> request CHANGE_OWNER, pid 3859, ppid 3858, prog_name strace,
> prog_file /usr/bin/strace, uid 1000, target_type PROCESS, tid
> 3859(strace,parent=3858(strace)), attr owner, value 1000, result
> NOT_GRANTED by AUTH
> 
> I got a result from strace.
> It should be terminated.

Why? it tried to setuid itself to the old owner and it wasn't listed
in its AUTH capabilies..

If you want to suppress these 'spurious' AUTH failures there is a build
option: in the AUTH policy support check the 'Always allow setting to
the same id'

I agree that it may seems stupid but I suspect there is a formal reason
for this behaviour

-- 
Lorenzo Marcantonio
Logos Srl