Re: A problem when pulling linux-3.8.y

Hi,

Regarding this, I did some more digging. I disabled all the modules, enabled
one at a time rebooteed and see where the error occurs.

It seems that FF policy module is doing the trick. When I have FF enabled,
system hangs on that error message. Basicly all I need FF for is pretty much
preventing people from executing nothing but allowed binaries, but I think I
can use ACL for that as well, have to do some digging.

Either way I think FF should be fixed, at some point.



-----Original Message-----
From: Mikko Rinne [mailto:[email protected]] 
Sent: 14. toukokuuta 2013 5:16
To: 'RSBAC Discussion and Announcements'
Subject: RE: [rsbac] A problem when pulling linux-3.8.y

Hey,

Sorry for spamming this mailing list, but;

I finally managed to clone linux-3.8.y (dont know if someone fixed it or
so), but I've came across a new problem which seems to persist in 3.7.y as
well, I tried to clone 3.7.y which currently runs in rsbac-3.7.10+ version.

- I have AUTH, ACL, FF and CAP modules enabled
- Whenever I boot with softmode on, I got no problems
- Regardless which options I try with these modules enabled, I always get
"rsbac boot cannot set terminal process group (-1) inappropriate ioctl for
device" -error on boot. And like I said, when I have rsbac_softmode enabled
in the command line, it boots with no problem, so it's not a problem with
the system, but within a kernel
- I'm not using any initrd files

My grub.conf goes pretty much like this:

-- being copypaste --
title Gentoo Linux 3.8.13+ rsbac (softmode) root (hd0,0) kernel
/boot/vmlinuz-3.8.13-rsbac+ root=/dev/sda3 rsbac_cap_process_hiding
rsbac_auth_enable_login rsbac_softmode rsbac_auth_learn vga=0x334

title Gentoo Linux 3.8.13+ rsbac (hardmode) root (hd0,0) kernel
/boot/vmlinuz-3.8.13-rsbac+ root=/dev/sda3 rsbac_cap_process_hiding
vga=0x334
-- end copypaste --

I've attached a screenshot from vmware console so you guys can see it as
well.

Any help would be appreciated.