grsecurity forums

Full learning mode seems broken with grsecurity-2.1.11-2.6.24.5-200804211829 and gradm-2.1.11-200804142058 - and the shipped default policy.

Code: Select all

[root@localhost gradm2]# gradm -E -F -L /tmp/learn
Duplicate role :::kernel::: on line 300 of /etc/grsec/policy.
The RBAC system will not be allowed to be enabled until this error is fixed.
[root@localhost gradm2]# uname -a
Linux localhost.localdomain 2.6.24.5-grsec #1 SMP Mon May 19 01:12:56 CEST 2008 i686 i686 i386 GNU/Linux
[root@localhost gradm2]# gradm -v
gradm v2.1.11
Licensed under the GNU General Public License (GPL) version 2 or higher
Copyright 2002,2003,2004  Brad Spengler
[root@localhost gradm2]# md5sum /etc/grsec/policy
71d1fcbb43546a24e421b8ef5992c4ad  /etc/grsec/policy

IIRC, full learning is enabled by using gradm -F -L <learninglogfile>, no -E is used. I'll fix this particular combination of flags so you get the usage screen when trying to use it.

-Brad