kernel audit logging wont work

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Postby frankcc » Wed Jun 11, 2003 2:51 pm

debian:/proc/sys/kernel/grsecurity# echo 1002 > audit_gid
debian:/proc/sys/kernel/grsecurity# cat audit_gid
1


it dont save... why?
frankcc
 
Posts: 12
Joined: Wed May 28, 2003 3:12 pm

Postby spender » Wed Jun 11, 2003 3:30 pm

You probably set grsec_lock to 1, and thus you are not able to change any of the other sysctl entries until you reboot.
This is all explained in the kernel configuration help.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Postby frankcc » Thu Jun 12, 2003 3:14 am

shall i echo the gid into audit_gid and echo the group name into audit_group?

now i have done that and echoed 1 into the things i want, but it still dont work.
frankcc
 
Posts: 12
Joined: Wed May 28, 2003 3:12 pm

Previous

Return to grsecurity support