wiki:experiences:igraltist:acl-su
Releases
Current version
Git/Latestdiff: 1.5.6
Latest Snapshots
Produced after each commit or rebase to new upstream version
GIT
RSBAC source code, can be unstable sometimes
Events
No events planned
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
|
wiki:experiences:igraltist:acl-su [2012/07/21 21:57] 127.0.0.1 (old revision restored) |
wiki:experiences:igraltist:acl-su [2012/07/21 21:58] 127.0.0.1 (old revision restored) |
||
|---|---|---|---|
| Line 37: | Line 37: | ||
| - | |||
| - | ===== 10. Test change user as root user ===== | ||
| - | |||
| - | <code bash>su - security | ||
| - | -bash: /bin/su: Operation not permitted | ||
| - | </code> | ||
| - | |||
| - | This is the output from security-log. | ||
| - | |||
| - | <code bash | ||
| - | Wed Nov 3 12:54:01 2010 :<6>0000000658|rsbac_adf_request(): request EXECUTE, pid 26958, ppid 14663, prog_name bash, prog_file /bin/bash, uid 0, remote ip 192.168.1.5, target_type FILE, tid Device 253:01 Inode 88530 Path /bin/su, attr none, value none, result NOT_GRANTED by ACL | ||
| - | </code> | ||
| - | |||
| - | The root user don't have EXECUTE rights, because befor we remove with acl_mask the default rights and set them to zero. | ||
| - | |||
| - | ===== 11. Remove an user from ACL ===== | ||
| - | For example to remove an user from a acl file entry: | ||
| - | <code bash> | ||
| - | acl_grant -m USER "ID" FILE "/path/to/file" | ||
| - | </code> | ||
wiki/experiences/igraltist/acl-su.txt · Last modified: 2012/07/21 21:58 by 127.0.0.1