grsecurity forums

Hi!

While using this patch, with linux-2.4.21-rc8, I've come across a weird problem, I don't know if I'm doing something wrong, or if it is an actual acl system bug.

I keep getting this line in the logs:

denied link of /var/lib/dhcp/dhcpd.leases to /var/lib/dhcp/dhcpd.leases~ by (dhcpd:14819) uid/euid:0/0 gid/egid:0/0, parent (initlog:11002) uid/euid:0/0 gid/egid:0/0

this is my acl for dhcpd:

subject /usr/sbin/dhcpd oX
/var/run/dhcpd.pid wcd
/var/run
/var/lib/dhcp rwcd
/lib rx
/etc r
/dev/log rw
/dev/null rw
/usr/share r
/ h
/usr/sbin x
-CAP_ALL
+CAP_NET_BIND_SERVICE
+CAP_NET_RAW

In my default acl, /tmp is rwcd, and I have the same problem.

% cd /tmp
% touch somefile
% ln somefile somelink
ln: creating hard link `somelink' to `somefile': Permission denied

denied link of /tmp/somefile to somelink by (ln:27833) uid/euid:0/0 gid/egid:0/0, parent (bash:4122) uid/euid:0/0 gid/egid:0/0

Am I doing something wrong with the acls?

Best regards,
João

You did it correctly. The problem was my error. I've updated CVS and fixed it in the patch available on the site. Thanks for catching that.

-Brad