[grsec] denied rename with rwcd set?

[Brad Spengler]

> Thank you Brad for the explanation.
> 
> BTW: How does gradm behave if the subject is a directory?
> Is it right that any binary in that dir will be assigned to that 
> subject even it is created in the dir after ACL loading time?

The same, it adds the object for the directory instead of just
a specific binary.  Yes, subjects on a directory apply to 
binaries created in the directory even after the RBAC system
has been enabled.

-Brad
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20041216/8627f0d0/attachment.pgp