[grsec] logging of "create SUID" errors
Brad Spengler
spender at grsecurity.net
Fri Nov 10 18:55:59 EST 2006
On Fri, Nov 10, 2006 at 10:16:17PM +0100, Matija Nalis wrote:
> Would it be possible to mark differently deny errors for normal create
> (c object flag) and create SUID/SGID (m object flag) ?
>
> Currently (grsecurity-2.1.9-2.6.18) it looks like this for SUID/SGID create,
> and was very confusing as the object has "rwcdl" flags (sure, I'll probably
> be smarter and get this faster next time, but I'm not the only one out there :)
>
This is something I've wanted to do, and will change it in 2.1.10.
-Brad
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20061110/d9964a05/attachment.pgp
More information about the grsecurity
mailing list