Permission denied - problem

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Permission denied - problem

Postby Euchrid » Mon Jan 12, 2004 5:43 pm

Hi
I had installed grsecurity for kernel 2.4.24.
Most things work fine, but i have a problem: sometimes when i give instruction from
root level
netstat -ta
i got correct table of connections as an output, and sometimes i
got:
netstat -ta
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign
Address State
/proc/net/tcp: Permission denied

The same problem occurs for "route":
route
/proc/net/route: Permission denied
INET (IPv4) not configured in this system.

there is no rule, sometimes o got right answer, and sometimes i
got error.
It gets a little iritating. The same thing have place with
netstat -ta from user level.
With option can cause this??
In Network Protection I have only "large entropy pools" marked.
linux slackware 9.1
Euchrid
 
Posts: 3
Joined: Mon Jan 12, 2004 5:40 pm

Postby axehind » Tue Jan 13, 2004 10:57 pm

Do you have proc resrictions enabled? Do you get any message in /var/log/messages?
axehind
 
Posts: 13
Joined: Mon Jul 01, 2002 1:32 pm

Postby Euchrid » Wed Jan 14, 2004 7:23 pm

yes , J have proc resrictions enabled.
no, J dont get any message in /var/log/messages.

for example
first
root@pajtel:/usr/src/linux# route
/proc/net/route: Permission denied
INET (IPv4) not configured in this system.

next , and ewerything is ok
root@pajtel:/usr/src/linux# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
localnet * 255.255.255.252 U 0 0 0 eth0
192.168.1.0 * 255.255.255.0 U 0 0 0 netgonzus
172.16.0.0 * 255.255.0.0 U 0 0 0 eth1
loopback * 255.0.0.0 U 0 0 0 lo
default aa233.internetd 0.0.0.0 UG 1 0 0 eth0
root@pajtel:
Euchrid
 
Posts: 3
Joined: Mon Jan 12, 2004 5:40 pm

Postby Euchrid » Sat Feb 07, 2004 5:44 pm

J forgot set "restric to user only"
now everything is ok
Euchrid
 
Posts: 3
Joined: Mon Jan 12, 2004 5:40 pm


Return to grsecurity support

cron