Re: ACL READ

After reboot the rsbac_login was working.

Maybe from testing was something not up to date.

Am 2012-04-09 19:29, schrieb Jens Kasten:
> Oh its looks that I forgot to think :)
>
> I was trying to extend the ebuild for rsbac-admin.
> There on testing I did switch to UM exclusive.
> The only what was not working was the local login.
> I did a sysmlink from /bin/rsbac_login to /bin/login.
>
> Nothing appears in the logfile just the message on login promt for
> wrong password.
>
> Bellow the modification what I did.
> cat system-auth
> auth		required	pam_env.so
> auth        required    pam_rsbac.so
> auth		optional	pam_permit.so
>
> account     required    pam_rsbac.so
> account		optional	pam_permit.so
>
> password    required    pam_rsbac_oldpw.so
> password	required	pam_cracklib.so difok=2 minlen=8 dcredit=2
> ocredit=2 retry=3
> password    required    pam_rsbac.so
> password	optional	pam_permit.so
>
> session		required	pam_limits.so
> session		required	pam_env.so
> session     required    pam_rsbac.so
> session		optional	pam_permit.so
>
>
>  cat /etc/nsswitch.conf
> # /etc/nsswitch.conf:
>
> passwd:      rsbac
> shadow:      rsbac
> group:       rsbac
>
> # passwd:    db files nis
> # shadow:    db files nis
> # group:     db files nis
>
> hosts:       files dns
> networks:    files dns
>
> services:    db files
> protocols:   db files
> rpc:         db files
> ethers:      db files
>
> netmasks:    files
> netgroup:    files
> bootparams:  files
>
> automount:   files
> aliases:     files
>
>
>
> Am 2012-04-09 09:25, schrieb Amon Ott:
>> On Sunday 08 April 2012 wrote Jens Kasten:
>>> Hi list,
>>>
>>> On latest git kernel  I use as normal user this command:
>>>
>>>       rsbac_usershow jens
>>>
>>> And get a result.
>>> But in the same time in the logfile I saw this:
>>>
>>> Sun Apr  8 20:41:39 2012 :<6>0000008626|rsbac_adf_request(): 
>>> request
>>> READ, pid 4184, ppid 4178, prog_name rsbac_usershow, prog_file
>>> /usr/bin/rsbac_usershow, uid 1000, remote ip 192.168.1.5, 
>>> target_type
>>> USER, tid 1000, attr none, value none, result NOT_GRANTED by ACL
>>>
>>> I don't get it why is it READ denied by ACL but an usefull result 
>>> is
>>> obtain.
>>
>> The result is incomplete - you get everything you are allowed to 
>> see.
>>
>> Amon.

-- 
Mit freundlchen  Grüßen

Jerns Kasten


http://www.kasten-edv.de
_______________________________________________
rsbac mailing list
[email protected]
http://www.rsbac.org/mailman/listinfo/rsbac