Page 1 of 1

Syslog message

PostPosted: Thu Feb 23, 2017 4:33 am
by film
Hi folks,

I always get the following error message in my syslog:

grsec: denied kernel module auto-load of ansi_cprng by uid 1000
grsec: denied kernel module auto-load of drbg by uid 1000


Any ideas?

Re: Syslog message

PostPosted: Thu Feb 23, 2017 8:06 am
by spender
These messages are from GRKERNSEC_MODHARDEN. If the modules listed are modules you want to have loaded on the system, then add:
modprobe ansi_cprng
modprobe drbg

to an init script. MODHARDEN prevents module auto-loads by unprivileged users, giving the administrator back control over what modules are allowed to be loaded by the system.

-Brad