grsecurity forums

Hi folks,

I always get the following error message in my syslog:

grsec: denied kernel module auto-load of ansi_cprng by uid 1000
grsec: denied kernel module auto-load of drbg by uid 1000

Any ideas?

These messages are from GRKERNSEC_MODHARDEN. If the modules listed are modules you want to have loaded on the system, then add:
modprobe ansi_cprng
modprobe drbg

to an init script. MODHARDEN prevents module auto-loads by unprivileged users, giving the administrator back control over what modules are allowed to be loaded by the system.

-Brad