gradm problem....please help.

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

gradm problem....please help.

Postby bob » Sat Dec 11, 2004 9:36 pm

install grsec and gradm no problems.

My problem is taking gradm out or learning mode:

debi:~# ./learnstart.sh
debi:~# ./learnstop.sh
Unable to open /etc/grsec/acl for writing.
Error: No such file or directory
debi:~# gradm -S
The RBAC system is currently enabled.
debi:~# pico learnstop.sh

GNU nano 1.2.4 File: learnstop.sh

#!/bin/sh
gradm -F -L /etc/grsec/learning.log -O /etc/grsec/acl

If i make the file acl myself...it still does not recognise it.

Any help would be apprceiated!
bob
 
Posts: 2
Joined: Sat Dec 11, 2004 9:31 pm

Postby bob » Sat Dec 11, 2004 9:47 pm

OK figured out that i had to disable gradm before i could write the file :)
bob
 
Posts: 2
Joined: Sat Dec 11, 2004 9:31 pm

Postby spender » Mon Dec 13, 2004 5:05 pm

remember that the policy file is /etc/grsec/policy, not /etc/grsec/acl. I've fixed the last two dangling references to /etc/grsec/acl in gradm (though they weren't ones that suggested that /etc/grsec/acl was the policy file).

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to grsecurity support