include </path/to/directory> issue

[Kyoshiro]

When there's an include entry to a directory in the policy, the following access controls are not loaded. For example :

Code: Select all

....

domain restricted g users guests
include </etc/grsec/restricted>
include </etc/grsec/common>

role default G
role_transitions admin
include </etc/grsec/default>
include </etc/grsec/common>


If /etc/grsec/restricted is a directory, gradm complains about :

There is no default role present in your configuration.
Please read the RBAC documentation and create a default role before attempting to enable the RBAC system.

When it's a file, everything's ok.

PS: I'm using latest grsec and gradm (v2.1.0) + kernel 2.4.28 + secfixes

[spender]

I've fixed this in current CVS.

-Brad

[Kyoshiro]

Thanks