Login into box with gradm running

Submit your RBAC policies or suggest policy improvements

Login into box with gradm running

Postby kMOD » Thu Jan 22, 2004 8:02 pm

Hi.
I have problems with setting up a acl file to let me login to my box into user account (not root). When I'm trying to do such thing I got prompt for username then password and when I wrote it I got 'password incorect' although I'm typing it correctly. Also there is no way to login via ftp.
What should I modyfy or what should I add into my acl file?
kMOD
 
Posts: 2
Joined: Thu Jan 22, 2004 7:55 pm

Postby kMOD » Fri Jan 23, 2004 7:13 am

It seems I have to answer by myself :)
I have digged /var/log/syslog alerts and prepared some rules for acl file. Here they are:

/usr/local/sbin/proftpd h {
/var/log/wtmp w
/var/log/xferlog w
/usr/local/var/proftpd/proftpd.scoreboard rw
/dev/log rw
+CAP_SYS_CHROOT
+CAP_NET_BIND_SERVICE
}

This allows remote users to login via ftp.
Sorry for bothering ;)

PS. ssh problems also was managed with reading /var/log/syslog ;-)
kMOD
 
Posts: 2
Joined: Thu Jan 22, 2004 7:55 pm

Postby Blue Lightning » Mon Mar 01, 2004 3:58 pm

It's probably easier to use learning mode to figure out the rules (at least initially) rather than manually reading the logs.
Blue Lightning
 
Posts: 5
Joined: Mon Mar 01, 2004 3:44 pm


Return to RBAC policy development