[rsbac] rsbac_rc_get_item () returned error -1009! rsbac thread pid 4294967295 ??

[Amon Ott]

Hello Gabor!

On Freitag, 16. Januar 2004 14:33, gabor.horvath at konicaminolta.hu wrote:
> I have a strange error now. I ahve installed a standard (v3) Debian and
> applied my rsbac backup to it. I was very surprised when I realized that I
> cannot boot the machine. At the very moment when init should start I get a
> shell. No access to anything. Just internal commands. cd /etc : operation
> not permitted...

The usual question here: Does it work in softmode? When restoring a backup 
from an older version, there might be some essential rights missing, which 
are only available in the later version.
 
> Removed all rsbac.dat and booting (not maintance kernel) is OK. rsbac
> regenerated standard settings.
> 
> Restored only a subset (including just rc_type_fds) to the machine I got
> (just before init should start)
> rsbac_adf_request_rc(): rsbac_rc_get_item() returned error -1009!

This is RSBAC_ENOTFOUND - RC cannot find the type definition for a type set in 
an rc_type_fd attribute. This is an inconsistent configuration.

> rsbac_init(): Started rsbac thread with pid 4294967295 (!!!!!!!!!!!!!!!!!)
> kernel pani: no init found (blah..blah..)

Ouch, -1 means that the kernel thread could not be started! Never saw that 
before, this is the reason why there is not even an error check here.
 
> kernel is 2.4.24 with rsbac 1.2.2 (all the 6 bugfixes are applied). This
> machine uses two SATA HDDs with software RAID but as no problem with
> standard settings I suppose this is not a problem.

Software RAID is fine, I use it myself sometimes.
 
> My rsbac settings are working on more then 4 machines with 1.2.2-pre5
> version without any problem.
> I am very frustated because I cannot get a shell to see what can be the
> problem (without init). rsbacd thread pid is also very interesting above..
> 
> Anyone with a clue?

Another check: Did you possibly try to restore with 1.2.2-pre5 admin tools on 
a 1.2.2-final system? This combination leads to bad setup corruption, because 
the parameters differ and the version check sees the same version.

Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22