grsecurity forums

by **frankcc** » Wed Jun 11, 2003 2:51 pm

debian:/proc/sys/kernel/grsecurity# echo 1002 > audit_gid
debian:/proc/sys/kernel/grsecurity# cat audit_gid
1

it dont save... why?

by **spender** » Wed Jun 11, 2003 3:30 pm

You probably set grsec_lock to 1, and thus you are not able to change any of the other sysctl entries until you reboot.
This is all explained in the kernel configuration help.

-Brad

by **frankcc** » Thu Jun 12, 2003 3:14 am

shall i echo the gid into audit_gid and echo the group name into audit_group?

now i have done that and echoed 1 into the things i want, but it still dont work.

grsecurity forums

kernel audit logging wont work