grsecurity-2.0-pre5-2.4.21.patch - hardlinks broken?

[darko]

Hi!

While using this patch, with linux-2.4.21-rc8, I've come across a weird problem, I don't know if I'm doing something wrong, or if it is an actual acl system bug.

I keep getting this line in the logs:

denied link of /var/lib/dhcp/dhcpd.leases to /var/lib/dhcp/dhcpd.leases~ by (dhcpd:14819) uid/euid:0/0 gid/egid:0/0, parent (initlog:11002) uid/euid:0/0 gid/egid:0/0

this is my acl for dhcpd:

subject /usr/sbin/dhcpd oX
/var/run/dhcpd.pid wcd
/var/run
/var/lib/dhcp rwcd
/lib rx
/etc r
/dev/log rw
/dev/null rw
/usr/share r
/ h
/usr/sbin x
-CAP_ALL
+CAP_NET_BIND_SERVICE
+CAP_NET_RAW

In my default acl, /tmp is rwcd, and I have the same problem.

% cd /tmp
% touch somefile
% ln somefile somelink
ln: creating hard link `somelink' to `somefile': Permission denied

denied link of /tmp/somefile to somelink by (ln:27833) uid/euid:0/0 gid/egid:0/0, parent (bash:4122) uid/euid:0/0 gid/egid:0/0

Am I doing something wrong with the acls?

Best regards,
João

[spender]

You did it correctly. The problem was my error. I've updated CVS and fixed it in the patch available on the site. Thanks for catching that.

-Brad