[rsbac] error msg ?

[Amon Ott]

On Montag 25 September 2006 16:03, Andrea Pasquinucci wrote:
> Some days ago I installed a new server with rsbac-1.2.8 and every 
time I 
> was setting a new RC rule (in Softmode also) I was getting an error 
> message similar to the following one
> 
> <7>0000000644|check_comp_rc(): pid 2457 (attr_set_file_d), owner 
400, 
> rc_role 1, DIR rc_type 3, request MODIFY_ATTRIBUTE -> NOT_GRANTED!
> 
> All rules have been installed and work correctly, and no error 
messages 
> of other type appeared in the log. I don't understand...

This is a message from rsbac_debug_adf_rc. Your role 1 does not have 
MODIFY_ATTRIBUTE right to FD type 3, but probably admin_type 
role_admin. So the request gets granted because of the admin_type.

Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22