Re: rsbac_cap_learn not work

Javier Juan Martínez Cabezón <[email protected]> Mon, 3 Dec 2012 14:37:42 +0100
Newsgroups gmane.linux.rsbac
Message-ID <CAD98N_GjgPx1ZBHNj_on5Bys-y_-F7+2+qd2-+NaZNbbYVm_SA@mail.gmail.com>
When I played with this, I realized that learning mode doesn't work in
softmode, just when run in enforced.

2012/12/3, Amon Ott <[email protected]>:
> Am 26.11.2012 11:31, schrieb Jens Kasten:
>> I add this to boot parameter.
>>
>> rsbac_cap_learn
>>
>> Its looks that is not working the cap learn.
>> The rsbac-debug show:
>>
>> cat /proc/rsbac-info/debug | grep cap
>> rsbac_cap_process_hiding is 1
>> rsbac_cap_log_missing is 0
>> rsbac_cap_learn is 1
>>
>>
>> But the log show:
>>
>> Mon Nov 26 11:18:24 2012 :<6>0000000208|sbac_adf_request(): request
>> MODIFY_SYSTEM_DATA, pid 3235, ppid 1, prog_name rtkit-daemon,
>> prog_file /usr/libexec/rtkit-daemon, uid 104, audit uid 101, target_type
>> PROCESS, tid 3292(pulseaudio,parent=3291(pulseaudio)), attr none, value
>> none, result NOT_GRANTED (Softmode) by CAP
>>
>> Also the in the log on the name rsbac the "r" is missing.
>> Mon Nov 26 11:18:45 2012 :<6>0000000222|sbac_list_auto_rehash(): 1 lists
>> rehashed
>
> CAP learning looks like a dummy right now. Will have to look at it in
> detail later.
>
> Amon.
> --
> http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22
> _______________________________________________
> rsbac mailing list
> [email protected]
> http://www.rsbac.org/mailman/listinfo/rsbac
>