[prev in list] [next in list] [prev in thread] [next in thread] 

List:       lids-user
Subject:    [lids-user] LIDS ACLs- Ambiguity
From:       learn lids <learnlids () yahoo ! com>
Date:       2004-09-24 18:06:55
Message-ID: 20040924180655.7868.qmail () web61103 ! mail ! yahoo ! com
[Download RAW message or body]

Hi All,
       I am not clear with how lids handles a list of ACLs. Is it like a firewall, \
deny all allow only some. I check this scheme, i made /boot/grub as a default rule \
for deny to all. lidsconf -A -o /boot/grub/ -j DENY. Now if i give read access to cat \
lidsconf -A -s /bin/cat -o /boot/grub/ -j READONLY then it is able to read, but the \
same if i try to give vi write access it does not work, lidsconf -A -s /bin/vi -o \
/boot/grub/ -j WRITE. Also the combination of global READONLY and few WRITES also \
does not work. I am using 2.4.20 and lids 1.1.2rc6.  Please advice
 
Thanks
Joe


		
---------------------------------
Do you Yahoo!?
vote.yahoo.com - Register online to vote today!


[Attachment #3 (text/html)]

<DIV>Hi All,<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I am not clear with how lids \
handles a list of ACLs. Is it like a firewall, deny all allow only some. I check this \
scheme, i made /boot/grub as a default rule for deny to all. lidsconf -A -o \
/boot/grub/ -j DENY. Now if i give read access to cat lidsconf -A -s /bin/cat -o \
/boot/grub/ -j READONLY then it is able to read, but the same if i try to give vi \
write access it does not work, lidsconf -A -s /bin/vi -o /boot/grub/ -j WRITE. Also \
the combination of global READONLY and few WRITES also does not work. I am using \
2.4.20 and lids 1.1.2rc6.</DIV> <DIV>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Please \
advice</DIV> <DIV>&nbsp;</DIV>
<DIV>Thanks</DIV>
<DIV>Joe<BR></DIV><p>
		<hr size=1>Do you Yahoo!?<br><a
href="http://vote.yahoo.com">vote.yahoo.com</a> - Register online to vote today!


-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
lids-user mailing list
lids-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lids-user

[prev in list] [next in list] [prev in thread] [next in thread]