grsecurity forums

Hello,

It seems that gradm print warnings with wrong line number in case of using defines and/or includes.

I am getting an warning as follow

Code: Select all

Warning: owner of symlink /var/mail in role piotr, subject / does not match that of its target /var/spool/mail.  Symlink is specified on line 185 of /etc/grsec/policy.

And the policy around line 185 looks like

Code: Select all

178 role piotr u {
179     subject / {
180         $basic_bin_access
181         $users_apps
182         $basic_env
183         $users_env
184
185         /home       rwcdl
186         /home/piotr rwcdlx
187
188         bind disabled
189         connect disabled
190
191         -CAP_ALL
192     }
193
194     include </etc/grsec/policy.d/users-apps>
195     include </etc/grsec/policy.d/special/szpanbut>
196 }

The very only place I have `/var/mail` specified is inside `/etc/grsec/policy.d/defines/users_env` that is loaded in the very first line of `/etc/grsec/policy` with

Code: Select all

include </etc/grsec/policy.d/defines>

It's more a comsetic bug, than anything, still worth reporting.