On Sun, 02 Nov 2003 23:06:41 +0100
Denny Schierz <[EMAIL PROTECTED]> wrote:

> hi,
> 
> i installed the grsecurity patch for the kernel and the grsec package,
> but grsec won't start:
> 
> s15144503 bwm_tools-0.1.4 # /etc/init.d/grsecurity start
>  * Starting
> grsecurity...                                                                        
>                                   [ !! ]
> 
> i don't know why, there is no message why it fails.
> 
> any suggestions?
> 
> 
> -- 
> cu denny
> 
> Gnupg key can be found under pgp.mit.edu, key ID 0x73137598
> 

Hi Denny,

I'm using grsecurity patch for some 3 months, but as far as I know it is a kernel 
patch + userland program/s.
I'm currently running 2.4.22-grsec-1.9.12 /i think/ and first thing i did when 
compling the kernel was to
activate grsec-part of the kernel config /it is at the end/.
Just put medium level of protection /with high level X won't start/ but you could 
configure it by hand -
there are many options.
I simply used the quick solution. There is a small help screen while in kernel config 
for grsec /
also for other things/, so you can see what options are there. 
As far as i know where is utility - gradm for administring grsec ACL.
Just a guess - I think that while kernel is starting it activates grsecurity - in my 
case medium level
by default. Later on you could change that by using gradm-program.
For time being i'm happy with just default config, so have never bothered to use gradm.
Plus using grsec i'm also using PROPLICE GCC compile option for stack-overflow 
protection.
Hope this helps.
Bye.
Rumen.


--
[EMAIL PROTECTED] mailing list

Reply via email to