Re: ACL READ

On Sunday 08 April 2012 wrote Jens Kasten:
> Hi list,
>
> On latest git kernel  I use as normal user this command:
>
>       rsbac_usershow jens
>
> And get a result.
> But in the same time in the logfile I saw this:
>
> Sun Apr  8 20:41:39 2012 :<6>0000008626|rsbac_adf_request(): request
> READ, pid 4184, ppid 4178, prog_name rsbac_usershow, prog_file
> /usr/bin/rsbac_usershow, uid 1000, remote ip 192.168.1.5, target_type
> USER, tid 1000, attr none, value none, result NOT_GRANTED by ACL
>
> I don't get it why is it READ denied by ACL but an usefull result is
> obtain.

The result is incomplete - you get everything you are allowed to see.

Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22