--- linux-2.4.0-test11-rsbac-1.1.0/rsbac/data_structures/acl_data_structures.c Tue Oct 17 16:57:44 2000 +++ linux-2.4.0-test12-rsbac-1.1.0a/rsbac/data_structures/acl_data_structures.c Thu Dec 21 17:13:33 2000 @@ -5837,6 +5837,7 @@ #ifdef CONFIG_RSBAC_USER_MOD_IOPERM struct rsbac_acl_entry_t gen_ioports_entry = RSBAC_ACL_GENERAL_SCD_IOPORTS_ENTRY; #endif + struct rsbac_acl_entry_t gen_other_entry = RSBAC_ACL_GENERAL_SCD_OTHER_ENTRY; struct rsbac_acl_entry_t sysadm_entry = RSBAC_ACL_SYSADM_SCD_ENTRY; struct rsbac_acl_entry_t sysadm_other_entry = RSBAC_ACL_SYSADM_SCD_OTHER_ENTRY; struct rsbac_acl_entry_t acman_other_entry = RSBAC_ACL_ACMAN_SCD_OTHER_ENTRY; @@ -5873,6 +5874,8 @@ add_scd_subitem(scd_item_p, acman_other_entry); if(scd_item_p && !lookup_scd_subitem(scd_item_p, ACLS_USER, RSBAC_SYSADM_UID)) add_scd_subitem(scd_item_p, sysadm_other_entry); + if(scd_item_p && !lookup_scd_subitem(scd_item_p, ACLS_GROUP, RSBAC_ACL_GROUP_EVERYONE)) + add_scd_subitem(scd_item_p, gen_other_entry); } /* free access to scd_list */ rsbac_write_unlock(&scd_list_head.lock, &flags); --- linux-2.4.0-test11-rsbac-1.1.0/include/rsbac/acl_data_structures.h Mon Dec 11 10:58:14 2000 +++ linux-2.4.0-test12-rsbac-1.1.0a/include/rsbac/acl_data_structures.h Thu Dec 21 17:09:50 2000 @@ -86,6 +86,12 @@ } #endif +#define RSBAC_ACL_GENERAL_SCD_OTHER_ENTRY \ + { ACLS_GROUP, \ + RSBAC_ACL_GROUP_EVERYONE, \ + ((rsbac_request_vector_t) 1 << R_EXECUTE) \ + } + #define RSBAC_ACL_ACMAN_SCD_ENTRY \ { ACLS_USER, \ RSBAC_SECOFF_UID, \