Re: acl_mask backup gives a row for *each* file

Amon Ott <[email protected]>
Newsgroups gmane.linux.rsbac
Message-ID <[email protected]>
On Friday 30 March 2012 wrote Lorenzo Marcantonio:
> Strange behaviour for acl_mask in backup mode:
>
> acl_mask -br FD /
>
> (used in the backup script) emits a row for *each* file and directory in
> the system!
>
> This is clearly unacceptable (also, I didn't set any mask and the list
> where reset a few days ago)
>
> Is this a known issue? I'm using kernel 3.1.5-rbac with the
> rsbac-admin-1.4.6 userspace.

This is a bug. Please try attached path to the tools or use current 
rsbac-admin git branch rsbac-admin-1.4.

Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22

_______________________________________________
rsbac mailing list
[email protected]
http://www.rsbac.org/mailman/listinfo/rsbac
remove-moveto.diff (text/x-diff, 2.1 KB)
commit 89e62773fbde8d2158f7a9ee090f30a4a222d7d1
Author: Amon Ott <[email protected]>
Date:   Mon Apr 2 08:51:02 2012 +0200

    Remove v1.5 request MOVETO from request groups.

diff --git a/main/headers/rsbac/request_groups.h b/main/headers/rsbac/request_groups.h
index 2245597..d375da1 100644
--- a/main/headers/rsbac/request_groups.h
+++ b/main/headers/rsbac/request_groups.h
@@ -43,8 +43,7 @@
   ((rsbac_request_vector_t) 1 << R_WRITE) | \
   ((rsbac_request_vector_t) 1 << R_WRITE_OPEN) | \
   ((rsbac_request_vector_t) 1 << R_IOCTL) | \
-  ((rsbac_request_vector_t) 1 << R_LOCK) | \
-  ((rsbac_request_vector_t) 1 << R_MOVETO) \
+  ((rsbac_request_vector_t) 1 << R_LOCK) \
   )
 
 #define RSBAC_READ_WRITE_REQUEST_VECTOR (\
@@ -79,8 +78,7 @@
   ((rsbac_request_vector_t) 1 << R_RECEIVE) | \
   ((rsbac_request_vector_t) 1 << R_NET_SHUTDOWN) | \
   ((rsbac_request_vector_t) 1 << R_IOCTL) | \
-  ((rsbac_request_vector_t) 1 << R_LOCK) | \
-  ((rsbac_request_vector_t) 1 << R_MOVETO) \
+  ((rsbac_request_vector_t) 1 << R_LOCK) \
   )
 
 #define RSBAC_READ_WRITE_OPEN_REQUEST_VECTOR (\
@@ -145,8 +143,7 @@
   ((rsbac_request_vector_t) 1 << R_RECEIVE) | \
   ((rsbac_request_vector_t) 1 << R_NET_SHUTDOWN) | \
   ((rsbac_request_vector_t) 1 << R_IOCTL) | \
-  ((rsbac_request_vector_t) 1 << R_LOCK) | \
-  ((rsbac_request_vector_t) 1 << R_MOVETO) \
+  ((rsbac_request_vector_t) 1 << R_LOCK) \
   )
 
 #define RSBAC_DEV_REQUEST_VECTOR (\
@@ -358,8 +355,7 @@
   ((rsbac_request_vector_t) 1 << R_RECEIVE) | \
   ((rsbac_request_vector_t) 1 << R_NET_SHUTDOWN) | \
   ((rsbac_request_vector_t) 1 << R_IOCTL) | \
-  ((rsbac_request_vector_t) 1 << R_LOCK) | \
-  ((rsbac_request_vector_t) 1 << R_MOVETO) \
+  ((rsbac_request_vector_t) 1 << R_LOCK) \
   )
 
 /* NW specials */
@@ -384,8 +380,7 @@
   ((rsbac_request_vector_t) 1 << R_CLOSE) | \
   ((rsbac_request_vector_t) 1 << R_TRUNCATE) | \
   ((rsbac_request_vector_t) 1 << R_WRITE) | \
-  ((rsbac_request_vector_t) 1 << R_WRITE_OPEN) | \
-  ((rsbac_request_vector_t) 1 << R_MOVETO) \
+  ((rsbac_request_vector_t) 1 << R_WRITE_OPEN) \
   )
 
 #define RSBAC_NWC_REQUEST_VECTOR (\
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.