[rsbac] Upgrading from 1.2.2 to 1.2.3

[Patrique Wolfrum]

Hello,

>What kernel version did you try, 2.4.27?
>  
>
Sorry, I forgot to mention it. I used the 2.4.27 prepatched kernel.

> 
>  
>
>>Switched back to the old kernel (rsbac 1.2.2) and everything works 
>>    
>>
>again.
>
>What version is this, 2.4.26? Could you retry v1.2.3 with 2.4.26?
>  
>
I will try that out.

>>Do you have an idea what could cause this strange behaviour of  the 
>>1.2.3 version ?
>>    
>>
>
>No, not really. Do you have any log messages for me? Maybe a copy of 
>the RSBAC init messages?
>
>It may be that there was too heavy pressure on the logging system, you 
>might retry with rsbac_nosyslog kernel param. But this is only a 
>vague guess.
>  
>
The heavy pressure could be an answer to the problem. Below are the 
error messages from one try to start the system (this is only a short 
excerpt since these messages repeat themselves for several minutes 
(resulting in a very big logfile)):

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Aug 11 13:51:06 pille /usr/sbin/cron[1529]: (CRON) STARTUP (fork ok)
Aug 11 13:51:11 pille kernel: check_comp_rc: rsbac_get_attr() for rc_type_fd returned error!
Aug 11 13:51:11 pille kernel: rsbac_get_super_block(): device 00:00 not yet available, sleeping
Aug 11 13:51:11 pille kernel: check_comp_rc: rsbac_get_attr() for rc_type_fd returned error!
Aug 11 13:51:11 pille kernel: rsbac_get_super_block(): device 00:00 not yet available, sleeping
Aug 11 13:51:11 pille kernel: check_comp_rc: rsbac_get_attr() for rc_type_fd returned error!
Aug 11 13:51:11 pille kernel: rsbac_get_super_block(): device 00:00 not yet available, sleeping
Aug 11 13:51:11 pille kernel: check_comp_rc: rsbac_get_attr() for rc_type_fd returned error!
Aug 11 13:51:11 pille kernel: rsbac_get_super_block(): device 00:00 not yet available, sleeping
Aug 11 13:51:11 pille kernel: check_comp_rc: rsbac_get_attr() for rc_type_fd returned error!
Aug 11 13:51:11 pille kernel: rsbac_get_super_block(): device 00:00 not yet available, sleeping
Aug 11 13:51:11 pille kernel: check_comp_rc: rsbac_get_attr() for rc_type_fd returned error!
Aug 11 13:51:11 pille kernel: rsbac_get_super_block(): device 00:00 not yet available, sleeping
Aug 11 13:51:12 pille kernel: rsbac_acl_get_single_right(): Could not lookup device, blindly granting access!
Aug 11 13:51:12 pille kernel: rsbac_acl_get_single_right(): Could not lookup device, blindly granting access!
Aug 11 13:51:12 pille kernel: rsbac_acl_get_single_right(): Could not lookup device, blindly granting access!
Aug 11 13:51:12 pille kernel: rsbac_acl_get_single_right(): Could not lookup device, blindly granting access!
Aug 11 13:51:12 pille kernel: rsbac_adf_request(): request GET_STATUS_DATA, pid 1578, ppid 1, prog_name mingetty, uid 0, target_type FILE, tid Device 00:00 Inode 1059 Path socket:/[1059], attr none, value 0, result NOT_GRANTED (Softmode) by RC
Aug 11 13:51:12 pille kernel: rsbac_adf_request(): request GET_STATUS_DATA, pid 1579, ppid 1, prog_name mingetty, uid 0, target_type FILE, tid Device 00:00 Inode 1059 Path socket:/[1059], attr none, value 0, result NOT_GRANTED (Softmode) by RC
Aug 11 13:51:12 pille kernel: rsbac_adf_request(): request GET_STATUS_DATA, pid 1580, ppid 1, prog_name mingetty, uid 0, target_type FILE, tid Device 00:00 Inode 1059 Path socket:/[1059], attr none, value 0, result NOT_GRANTED (Softmode) by RC
Aug 11 13:51:12 pille kernel: rsbac_adf_request(): request GET_STATUS_DATA, pid 1582, ppid 1, prog_name mingetty, uid 0, target_type FILE, tid Device 00:00 Inode 1059 Path socket:/[1059], attr none, value 0, result NOT_GRANTED (Softmode) by RC
Aug 11 13:51:12 pille kernel: rsbac_acl_get_single_right(): Could not lookup device, blindly granting access!
Aug 11 13:51:12 pille kernel: rsbac_adf_request(): request GET_STATUS_DATA, pid 1581, ppid 1, prog_name mingetty, uid 0, target_type FILE, tid Device 00:00 Inode 1059 Path socket:/[1059], attr none, value 0, result NOT_GRANTED (Softmode) by RC
Aug 11 13:51:12 pille kernel: check_comp_rc: rsbac_get_attr() for rc_type_fd returned error!
Aug 11 13:51:12 pille kernel: check_comp_rc: rsbac_get_attr() for rc_type_fd returned error!
Aug 11 13:51:12 pille kernel: rsbac_get_super_block(): device 00:00 not yet available, sleeping
Aug 11 13:51:12 pille kernel: rsbac_get_super_block(): device 00:00 not yet available, sleeping
Aug 11 13:51:12 pille kernel: check_comp_rc: rsbac_get_attr() for rc_type_fd returned error!
Aug 11 13:51:12 pille kernel: rsbac_get_super_block(): device 00:00 not yet available, sleeping
Aug 11 13:51:12 pille kernel: check_comp_rc: rsbac_get_attr() for rc_type_fd returned error!
Aug 11 13:51:12 pille kernel: rsbac_get_super_block(): device 00:00 not yet available, sleeping
Aug 11 13:51:12 pille kernel: check_comp_rc: rsbac_get_attr() for rc_type_fd returned error!
Aug 11 13:51:12 pille kernel: rsbac_get_super_block(): device 00:00 not yet available, sleeping
Aug 11 13:51:12 pille kernel: rsbac_acl_get_single_right(): Could not lookup device, blindly granting access!
Aug 11 13:51:12 pille kernel: rsbac_adf_request(): request GET_STATUS_DATA, pid 1583, ppid 1, prog_name mingetty, uid 0, target_type FILE, tid Device 00:00 Inode 1059 Path socket:/[1059], attr none, value 0, result NOT_GRANTED (Softmode) by RC
Aug 11 13:51:12 pille kernel: check_comp_rc: rsbac_get_attr() for rc_type_fd returned error!
Aug 11 13:51:12 pille kernel: rsbac_get_super_block(): device 00:00 not yet available, sleeping
Aug 11 13:51:13 pille kernel: rsbac_acl_get_single_right(): Could not lookup device, blindly granting access!
Aug 11 13:51:13 pille kernel: rsbac_acl_get_single_right(): Could not lookup device, blindly granting access!
Aug 11 13:51:13 pille kernel: rsbac_acl_get_single_right(): Could not lookup device, blindly granting access!
Aug 11 13:51:13 pille kernel: rsbac_adf_request(): request GET_STATUS_DATA, pid 1578, ppid 1, prog_name mingetty, uid 0, target_type FILE, tid Device 00:00 Inode 1365 Path socket:/[1365], attr none, value 0, result NOT_GRANTED (Softmode) by RC
Aug 11 13:51:13 pille kernel: rsbac_acl_get_single_right(): Could not lookup device, blindly granting access!
Aug 11 13:51:13 pille kernel: rsbac_adf_request(): request GET_STATUS_DATA, pid 1579, ppid 1, prog_name mingetty, uid 0, target_type FILE, tid Device 00:00 Inode 1365 Path socket:/[1365], attr none, value 0, result NOT_GRANTED (Softmode) by RC
Aug 11 13:51:13 pille kernel: rsbac_adf_request(): request GET_STATUS_DATA, pid 1582, ppid 1, prog_name mingetty, uid 0, target_type FILE, tid Device 00:00 Inode 1365 Path socket:/[1365], attr none, value 0, result NOT_GRANTED (Softmode) by RC
Aug 11 13:51:13 pille kernel: rsbac_adf_request(): request GET_STATUS_DATA, pid 1581, ppid 1, prog_name mingetty, uid 0, target_type FILE, tid Device 00:00 Inode 1365 Path socket:/[1365], attr none, value 0, result NOT_GRANTED (Softmode) by RC

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------

>Do you want me to port v1.2.2 to kernel 2.4.27 so you can at least 
>update your kernel now?
>  
>
That would be perfect. Thank you very much in advance.

With best regards.
    Patrique Wolfrum

-- 
Patrique Wolfrum 
Administrator - Fakultätsserver

Albert-Ludwigs-Universität Freiburg im Breisgau
Institut für allgemeine Wirtschaftsforschung
Abteilung für Wirtschaftsinformatik
Kollegiengebäude II
Platz der Alten Synagoge
79085 Freiburg