LINUX.IE, website of the Irish Linux Users' Group
Tux rules!

   
Home
New Users
Articles
Download
Projects
Community
Vendors

  Print Version
Email to...
 
Archives:


planetILUG

Recent News

News Archive


Join the
ILUG
on FaceBook


Join the
ILUG
on LinkedIn


Join the
ILUG SETI
Group



















 
 :: Mailing Lists

[ILUG] Debian and GRsecurity

[ILUG] Debian and GRsecurity

imduffy imduffy15 at gmail.com
Sat Jul 2 02:14:15 IST 2011


Hi Guys,

I was wondering if I could get some help with the grsecurity kernel. I am
having issues installing gradm.

I installed the grsecurity kernel binary for debian squeeze from this repo:
http://kernelsec.cr0.org/ it works perfectly.

However I wanted to enable RBAC with gradm, I downloaded the latest gradm
source code from the grsecurity website and compiled it however when I try
enable it I get the following error:

[duffy at pulse:~] # sudo gradm -E
Read access is allowed by role default to /sys, the directory which holds
entries that often leak information from the kernel.

There were 1 holes found in your RBAC configuration.  These must be fixed
before the RBAC system will be allowed to be enabled.

If I try to use gradm -D I get the following:

[duffy at pulse:~] # sudo gradm -D
Password:
You are using incompatible versions of gradm and grsecurity.
Please update both versions to the ones available on the website.
Make sure your gradm has been compiled for the kernel you are currently
running.

[duffy at pulse:~] # uname -a
Linux pulse.tuts4tech.net 2.6.27.29-4-grsec #1 SMP Sun Aug 16 12:21:49 UTC
2009 i686 GNU/Linux


Any advice?
I have tried using other versions of gradm however I have had no success.


More information about the ILUG mailing list
Read this without the formatting.
                                                                                                    

 

Hosted by HEAnet


Maintained by the ILUG website team. The aim of Linux.ie is to support and help commercial and private users of Linux in Ireland. You can display ILUG news in your own webpages, read backend information to find out how. Networking services kindly provided by HEAnet, server kindly donated by Dell. Linux is a trademark of Linus Torvalds, used with permission. No penguins were harmed in the production or maintenance of this highly praised website. Looking for the Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
RSS Version
Powered by Dell