Remove/fix usage of MEDUSA_EVTYPE_NOTTRIGGERED in events
Closed this issue · 1 comments
Programator2 commented
Usage of MEDUSA_EVTYPE_NOTTRIGGERED
in evtypes causes authorization server not able to synchronize internal hierarchy with actual system (filesystem, processes, etc.).
In other words, evtypes need to have bitnr
assigned, so authorization server can decide whether the object can inherit security information from its parent (when object is not monitored) or it needs to be sent to authorization server to get specific security information.
See file_kobj_validate_dentry_dir
in Medusa and generic_set_handler
in Constable for more information.
Programator2 commented
- Remove
MEDUSA_EVTYPE_NOTTRIGGERED
fromgetfile
andgetprocess
. Changeset_bit
tobitmap_set
(seeMED_SET_BIT
) and similar functions.- Include assert of masked bitnr (when nottrigerred)