grsecurity forums

Hi!

I have problem with permisions on admin special role.

I have such error message when I try to add group and I don`t understand it. :

(admin:S:/) denied link of /etc/group.6150 to /etc/group.lock by /usr/sbin/groupadd[groupadd:6150] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[bash:13436] uid/euid:0/0 gid/egid:0/0

My admin role is set like in default config file /etc/grsec/policy so it looks:

role admin sA
subject / r
/ rwcdmxi

What I have to change in my configuration to make it works?


Thanks for any advice

Hi,

you have to add a "l" (lowercase "L") to your object flags. Use

/ rwcdmxi l

instead of

/ rwcdmxi

This is a new feature introduced in grsecurity-2.1.0 (look at the sample policy file which is included in the gradm tar ball).

-vs

Thanks for your good advice It works now!