[rsbac] jail

Javier Juan Martínez Cabezón tazok.id0 at gmail.com
Sat Oct 8 15:52:41 CEST 2011


Try jail_flag "D"

El 8 de octubre de 2011 15:49, Javier Juan Martínez Cabezón <
tazok.id0 en gmail.com> escribió:

> Did you use "-t" flag?
>
> El 8 de octubre de 2011 15:41, Javier Juan Martínez Cabezón <
> tazok.id0 en gmail.com> escribió:
>
> Your app is trying to write in /dev/null and it can't, Have you thought in
>> create the node into the jail? (maybe you could create it into a loop device
>> with mknod and mount it using --bind into de jails required.
>>
>>
>> 2011/10/8 Jens Kasten <jens en kasten-edv.de>
>>
>>> Hi list,
>>>
>>> i have a problem with the jail.
>>> Maybe its a bug iam not sure.
>>>
>>> For example:
>>> Sat Oct  8 14:56:38 2011 :<6>0000001846|rsbac_adf_request(): request
>>> WRITE_OPEN, pid 32427, ppid 1, prog_name licq, prog_file /usr/bin/licq,
>>> uid 1000, targe
>>> t_type DEV, tid char 01:03, attr open_flag, value 32770, result
>>> NOT_GRANTED by JAIL
>>>
>>> Now i add this jail flag and start the licq again.
>>> Then the system free.
>>> Similar behavior i got on openoffice.
>>>
>>> Iam not sure, maybe it could also been a pax issue.
>>>
>>> Grüße
>>> Jens
>>>
>>> _______________________________________________
>>> rsbac mailing list
>>> rsbac en rsbac.org
>>> http://www.rsbac.org/mailman/listinfo/rsbac
>>
>>
>>
>


More information about the rsbac mailing list