Re: ACL READ
Jens Kasten <[email protected]>
| Newsgroups | gmane.linux.rsbac |
|---|---|
| Message-ID | <[email protected]> |
Oh its looks that I forgot to think :) I was trying to extend the ebuild for rsbac-admin. There on testing I did switch to UM exclusive. The only what was not working was the local login. I did a sysmlink from /bin/rsbac_login to /bin/login. Nothing appears in the logfile just the message on login promt for wrong password. Bellow the modification what I did. cat system-auth auth required pam_env.so auth required pam_rsbac.so auth optional pam_permit.so account required pam_rsbac.so account optional pam_permit.so password required pam_rsbac_oldpw.so password required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3 password required pam_rsbac.so password optional pam_permit.so session required pam_limits.so session required pam_env.so session required pam_rsbac.so session optional pam_permit.so cat /etc/nsswitch.conf # /etc/nsswitch.conf: passwd: rsbac shadow: rsbac group: rsbac # passwd: db files nis # shadow: db files nis # group: db files nis hosts: files dns networks: files dns services: db files protocols: db files rpc: db files ethers: db files netmasks: files netgroup: files bootparams: files automount: files aliases: files Am 2012-04-09 09:25, schrieb Amon Ott: > On Sunday 08 April 2012 wrote Jens Kasten: >> Hi list, >> >> On latest git kernel I use as normal user this command: >> >> rsbac_usershow jens >> >> And get a result. >> But in the same time in the logfile I saw this: >> >> Sun Apr 8 20:41:39 2012 :<6>0000008626|rsbac_adf_request(): request >> READ, pid 4184, ppid 4178, prog_name rsbac_usershow, prog_file >> /usr/bin/rsbac_usershow, uid 1000, remote ip 192.168.1.5, >> target_type >> USER, tid 1000, attr none, value none, result NOT_GRANTED by ACL >> >> I don't get it why is it READ denied by ACL but an usefull result is >> obtain. > > The result is incomplete - you get everything you are allowed to see. > > Amon. -- Mit freundlchen Grüßen Jerns Kasten http://www.kasten-edv.de _______________________________________________ rsbac mailing list [email protected] http://www.rsbac.org/mailman/listinfo/rsbac