Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

With Linux 2.6 I am only getting ON_OPEN and ON_EXEC events. What is wrong?

April 26, 2017events linux wrong

0

Posted

With Linux 2.6 I am only getting ON_OPEN and ON_EXEC events. What is wrong?

1 Answer

0

Posted

For Linux 2.6, Dazuko uses the new LSM (Linux Security Model) security hooks. This does not fit well into the current design of Dazuko. For this reason Dazuko will report every access event as ON_OPEN or ON_EXEC (even if the events were something different). If your application requires each event to be properly identified with Linux 2.6, then it is currently suggested that you patch your kernel with RSBAC. Dazuko is included in the RSBAC patchset and is based on RSBAC API’s. This allows Dazuko to correctly identify each access event type. Other solutions for Linux 2.6 and Dazuko are currently being investigated and worked on. In the future this should not be a problem.