Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 64883 - (grsec) gradm gets confused by the equivalence of lib and lib64. I am providing an ugly patch.
Summary: (grsec) gradm gets confused by the equivalence of lib and lib64. I am provid...
Status: RESOLVED UPSTREAM
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Hardened (show other bugs)
Hardware: AMD64 Linux
: High major (vote)
Assignee: The Gentoo Linux Hardened Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-09-21 12:19 UTC by Barry Schwartz
Modified: 2005-01-22 10:46 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
Patch for gradm-2.0.1-r1 on amd64 (gradm-lib64-duplicate.patch,791 bytes, patch)
2004-09-21 12:23 UTC, Barry Schwartz
Details | Diff
workaround for amd64 multilib-noncompliance (gradm_lib64.patch,1.08 KB, patch)
2005-01-19 11:19 UTC, Barry Schwartz
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Barry Schwartz 2004-09-21 12:19:21 UTC
When you use learning mode, gradm may complain that lib and lib64 objects are both present and equivalent, in implicitly generated subjects.

gradm tries to do the right thing, but I think it may be assuming a multilib system.  I've written an ugly, gentoo-amd64-specific patch.

Reproducible: Always
Steps to Reproduce:
1.Run learning mode for a role that can validate to gradm.
2.Try converting the logging output to a policy, using gradm.
3.Try to load the policy.

Actual Results:  
Complaints of lib and lib64 being the same.  Refusal to load.

Expected Results:  
Loaded the policy.

An ugly patch is attached.
Comment 1 Barry Schwartz 2004-09-21 12:23:24 UTC
Created attachment 40119 [details, diff]
Patch for gradm-2.0.1-r1 on amd64

This patch is ugly, because the issue isn't really an "amd64" issue, but a
filesystem structural problem.	But the patch refers specifically to amd64.
Comment 2 solar (RETIRED) gentoo-dev 2004-09-28 19:01:45 UTC
lv: Can you look at this multilib change?
Comment 3 Adam Mondl (RETIRED) gentoo-dev 2005-01-19 10:40:32 UTC
Is this patch still needed for gradm-2.1.0?
Comment 4 Barry Schwartz 2005-01-19 11:19:42 UTC
Created attachment 48982 [details, diff]
workaround for amd64 multilib-noncompliance
Comment 5 Barry Schwartz 2005-01-19 11:21:57 UTC
I've provided the new patch for 2.1.0.  This workaround won't be needed when amd64 goes fully multilib, but that probably won't be for several months.
Comment 6 Adam Mondl (RETIRED) gentoo-dev 2005-01-22 10:46:32 UTC
This issue has been fixed in grsecurity CVS.  The next grsecurity/gradm release should resolve this issue in portage as well.