symlinkown not working

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

symlinkown not working

Postby bugmenot » Tue Jan 15, 2013 11:45 am

Hi,

cat /boot/config-3.7.1-grsec | grep SYML
CONFIG_GRKERNSEC_SYMLINKOWN_GID=1006
CONFIG_GRKERNSEC_SYMLINKOWN=y

sysctl

kernel.grsecurity.enforce_symlinksifowner = 1
kernel.grsecurity.symlinkown_gid = 1006


apache /home folder on the web sites, shared host

AllowOverride all
Allow from all

With this configuration, when the symbolic link FollowSymLinks able to receive content from a folder different.
What is the wrong?
bugmenot
 
Posts: 14
Joined: Sat Jun 27, 2009 12:42 am

Re: symlinkown not working

Postby spender » Tue Jan 15, 2013 12:49 pm

Is apache running with GID or supplementary group 1006?

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to grsecurity support