grsecurity forums

Hi,

I appear to be stuck a bit. How can I allow access to a unix socket like /dev/log?

And what is socket (2,2,0) and how do I allow access to it if I need to?

Thanks,
Adam

to be able to connect to a unix socket, you need to give "rw" permissions to the path of the socket.

socket(2,2,0) would be "dgram ip".

The first number is the address family. For the ACL system we only deal with AF_INET. The second number is the socket type: stream, dgram, raw, etc. The third number is the protocol: ip, tcp, udp, etc.

you can look up the numbers in /usr/include/bits/socket.h
for the address family and socket types, and /etc/protocols for the protocols.

-Brad