problem with gradm -E

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

problem with gradm -E

Postby nyx » Mon Nov 29, 2004 11:15 am

When I try to do gradm -E, I'll get "Error copying structures to the kernel."

Before reboot, it was working ok with 2.4.27 / grsec 2.0.1...during last few months I did many upgrades and now it's slackware-current with custom kernel. But even after all those upgrades, it was working ok. Then I upgraded to 2.4.28 / grsec 2.0.2 and rebooted...and it started to give this message.
I tried old kernel and recompiled 2.0.1 gradm for it, but I got the same message, so I guess the problem is somewhere else.

Any idea, where should I start looking or what info should make it easier to locate where the problem is?

And what exactly can lead to this message? I looked into sources for gradm, but I have no idea what exactly causes that EFAULT (Bad address) error value and what can I do to make it work.

-------

strace gradm -E

...
...
...
open("/dev/grsec", O_WRONLY) = 3
write(3, "0\327\377\277\2\2\0\0\34\1\0\0", 12) = 2
close(3) = 0
mlock(0x8080f78, 284) = 0
mlock(0x80810a8, 52) = 0
mlock(0xbfffd720, 256) = 0
open("/etc/grsec/pw", O_RDONLY) = 3
read(3, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 112) = 112
read(3, "admin\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 112) = 112
open("/etc/grsec/pw", O_RDONLY) = 4
read(4, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 112) = 112
open("/dev/grsec", O_WRONLY) = 5
write(5, "x\17\10\10\2\2\0\0\34\1\0\0", 12) = -1 EFAULT (Bad address)
write(2, "Error copying structures to the "..., 40Error copying structures to the kernel.
) = 40
close(5) = 0
exit_group(1) = ?
nyx
 
Posts: 3
Joined: Sat Aug 03, 2002 4:53 pm

Postby spender » Tue Dec 07, 2004 2:51 pm

This has been fixed in current CVS of gradm2. A change was made to gradm_defs.h that fixes a conflict with glibc 2.3.3 (since they changed the value of RLIM_NLIMITS for new resource limits in linux 2.6.8, though 2.4 lacks these new resource limits)

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to grsecurity support