Problem with 2.4.27/2.0.1 -> 2.4.28/2.0.2 transition

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Problem with 2.4.27/2.0.1 -> 2.4.28/2.0.2 transition

Postby superbock » Sun Jan 02, 2005 10:46 am

Hi,

After upgrading, i noticed that one subject ACL stopped working properly. The logs say the subject (/usr/sbin/httpd o) has no permission to read/write. I believe the guilty part is:

/home
/home/httpd
/home/httpd/vhosts
/home/httpd/vhosts/* rwcd

Something changed or what might i be missing?

tia
superbock
 
Posts: 37
Joined: Sun Mar 31, 2002 6:34 pm

Postby spender » Sun Jan 02, 2005 7:55 pm

This was a problem in the regular expression code that I changed in 2.0.2.
/file/*/blah was to match /file/tmp/blah, but not /file/tmp/tmp2/blah
/file/* was to match /file/tmp and /file/tmp/tmp2, etc

the second case was broken so that it would only match /file/tmp. I've corrected this in CVS.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to grsecurity support