https://qa.mandrakesoft.com/show_bug.cgi?id=1005





------- Additional Comments From [EMAIL PROTECTED]  2003-02-07 22:57 -------
mmm I don't understand this kind of comment in the code  
"# don't lower security when not changing security level" 
 
since mseclib man states that : 
mseclib  is  a  python  library to access the function used by the msec 
program. This functions can be used  in  /etc/security/msec/level.local 
to OVERRIDE the behaviour of the msec program or in standalone 
scripts. 
(note the verb OVERRIDE which should not take any preset level into 
account thus conflicting with the the previous comment in the code) 
 
and finally in the same mseclib manual ! 
set_shell_timeout(val) 
           Set the shell timeout. A value of ZERO means NO TIMEOUT. 
 
I conclude as of comment #3 that set_shell_timeout(0) SHOULD set 
TMOUT to 0 regarless of current security level if it is specified in 
level.local. 
 
 
 



------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.



------- Reminder: -------
assigned_to: [EMAIL PROTECTED]
status: UNCONFIRMED
creation_date: 
description: 
Step to reproduce.

1. create a file /etc/security/msec/level.local containing
from mseclib import *
set_shell_timeout(300)

2. set security by executing msec (no level to be specified)

3. look at /etc/sysconfig/msec and notice the line:
TMOUT=300

All is correct for now.

Now I want to reset TMOUT to 0.

4. I edit /etc/security/msec/level.local and change the line to:
set_shell_timeout(0)

5. execute 'msec' again

6. the line in /etc/sysconfig/msec is still the same 'TMOUT=300'
where it should be TMOUT=0

Reply via email to