I was wondering if I could get some help with the grsecurity kernel. I am
having issues installing gradm.
I installed the grsecurity kernel binary for debian squeeze from this repo:
http://kernelsec.cr0.org/ it works perfectly.
However I wanted to enable RBAC with gradm, I downloaded the latest gradm
source code from the grsecurity website and compiled it however when I try
enable it I get the following error:
[duffy at pulse:~] # sudo gradm -E
Read access is allowed by role default to /sys, the directory which holds
entries that often leak information from the kernel.
There were 1 holes found in your RBAC configuration. These must be fixed
before the RBAC system will be allowed to be enabled.
If I try to use gradm -D I get the following:
[duffy at pulse:~] # sudo gradm -D
You are using incompatible versions of gradm and grsecurity.
Please update both versions to the ones available on the website.
Make sure your gradm has been compiled for the kernel you are currently
[duffy at pulse:~] # uname -a
Linux pulse.tuts4tech.net 220.127.116.11-4-grsec #1 SMP Sun Aug 16 12:21:49 UTC
2009 i686 GNU/Linux
I have tried using other versions of gradm however I have had no success.
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!