Skip to content

Conversation

petiepooo
Copy link

correct type to ftype and add equal to trust value.

Without these changes, these errors occur on fapolicyd rule reloads:

fapolicyd[17873]: Field type (type) is unknown in line 7

fapolicyd[17873]: '=' is missing for field trust, in line 7

correct type to ftype and add equal to trust falue
remove the trust specifier (they aren't trusted by default which is why this rule is needed).
@petiepooo
Copy link
Author

This worked before because the dir= specifier exempted everything under that directory. The type= specifier was ignored because it is not valid, and trust without an equal is invalid and ignored, so the two lines were essentially identical. However, if a trust=1 specifier is in place, it still does not work since the files present there are not in the trustdb (their trust is 0). So, the solution is to remove the trust specifier and change the type= to ftype= since ftype is a valid specifier. This makes the solution more specific as it only trusts executables and shared objects under the directory rather than all files.

@ferricoxide
Copy link
Owner

Sorry didn't see this before: got burried amongst a bunch of automated notifications.

At any rate, this project is not the cardinal project. The PR would need to be opened against the upstream project

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants