2006-04-11 21:52:54 +00:00
|
|
|
#
|
2006-06-01 17:02:28 +00:00
|
|
|
# $Id$
|
2006-04-11 21:52:54 +00:00
|
|
|
#=DESCRIPTION Basic parsing test, duplicate mode bits
|
|
|
|
#=EXRESULT PASS
|
|
|
|
# vim:syntax=subdomain
|
|
|
|
# Last Modified: Sun Apr 17 19:44:44 2005
|
|
|
|
#
|
|
|
|
/does/not/exist {
|
2006-05-02 16:15:41 +00:00
|
|
|
#include <includes/base>
|
2006-04-11 21:52:54 +00:00
|
|
|
|
[https://bugzilla.novell.com/show_bug.cgi?id=172061]
This (updated) patch to trunk adds support for Px and Ux (toggle
bprm_secure on exec) in the parser, As requested, lowercase p and u
corresponds to an unfiltered environmnet on exec, uppercase will filter
the environment. It applies after the 'm' patch.
As a side effect, I tried to reduce the use of hardcoded characters in
the debugging statements -- there are still a few warnings that have
hard coded letters in them; not sure I can fix them all.
This version issues a warning for every unsafe ux and issues a single
warning for the first 'R', 'W', 'X', 'L', and 'I' it encounters,
except when the "-q" or "--quiet" flag , "--remove" profile flag, or
"-N" report names flags are passed. Unfortunately, it made the logic
somewhat more convoluted. Wordsmithing improvements welcome.
2006-08-04 17:14:49 +00:00
|
|
|
/usr/X11R6/lib/lib*so* rrr,
|
2006-04-11 21:52:54 +00:00
|
|
|
/does/not/exist r,
|
[https://bugzilla.novell.com/show_bug.cgi?id=172061]
This (updated) patch to trunk adds support for Px and Ux (toggle
bprm_secure on exec) in the parser, As requested, lowercase p and u
corresponds to an unfiltered environmnet on exec, uppercase will filter
the environment. It applies after the 'm' patch.
As a side effect, I tried to reduce the use of hardcoded characters in
the debugging statements -- there are still a few warnings that have
hard coded letters in them; not sure I can fix them all.
This version issues a warning for every unsafe ux and issues a single
warning for the first 'R', 'W', 'X', 'L', and 'I' it encounters,
except when the "-q" or "--quiet" flag , "--remove" profile flag, or
"-N" report names flags are passed. Unfortunately, it made the logic
somewhat more convoluted. Wordsmithing improvements welcome.
2006-08-04 17:14:49 +00:00
|
|
|
/var/log/messages www,
|
|
|
|
/tmp/sd*.foo rwrwwrll,
|
|
|
|
/bin/cat pxpxpxpxpx,
|
|
|
|
/bin/ls ixixixix,
|
|
|
|
/bin/echo uxuxuxuxux,
|
2006-04-11 21:52:54 +00:00
|
|
|
}
|
|
|
|
|