[grsec] logging of "create SUID" errors

Brad Spengler spender at grsecurity.net
Fri Nov 10 18:55:59 EST 2006


On Fri, Nov 10, 2006 at 10:16:17PM +0100, Matija Nalis wrote:
> Would it be possible to mark differently deny errors for normal create 
> (c object flag) and create SUID/SGID (m object flag) ?
> 
> Currently (grsecurity-2.1.9-2.6.18) it looks like this for SUID/SGID create,
> and was very confusing as the object has "rwcdl" flags (sure, I'll probably
> be smarter and get this faster next time, but I'm not the only one out there :)
> 

This is something I've wanted to do, and will change it in 2.1.10.

-Brad
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20061110/d9964a05/attachment.pgp 


More information about the grsecurity mailing list