Medusa-Team/linux-medusa

Remove/fix usage of MEDUSA_EVTYPE_NOTTRIGGERED in events

Closed this issue · 1 comments

Usage of MEDUSA_EVTYPE_NOTTRIGGERED in evtypes causes authorization server not able to synchronize internal hierarchy with actual system (filesystem, processes, etc.).

In other words, evtypes need to have bitnr assigned, so authorization server can decide whether the object can inherit security information from its parent (when object is not monitored) or it needs to be sent to authorization server to get specific security information.

See file_kobj_validate_dentry_dir in Medusa and generic_set_handler in Constable for more information.

  1. Remove MEDUSA_EVTYPE_NOTTRIGGERED from getfile and getprocess.
  2. Change set_bit to bitmap_set (see MED_SET_BIT) and similar functions.
  3. Include assert of masked bitnr (when nottrigerred)