grsecurity forums

I have a dilemna.

In our embedded system we use busybox for many functions with symlinks to busybox.

/bin/cat -> /bin/busybox
/bin/ls -> /bin/busybox
etc...

I'm trying to make a policy where for a specific role, /bin/cat has different privileges than /bin/ls. Currently I'm only able to use /bin/busybox as the subject and can't seem to figure out how to differentiate /bin/cat vs /bin/ls.

Any help?

Can't you just make copies of the busybox binary to replace the symlinks? That would be the only possible way to enforce different subjects.

-Brad