Can't gradm -E

[albertlash]

Hello,

I'm running gentoo linux and am trying to get grsecurity working for me with no avail. I've installed grsec-sources 2.4.26-grsec-2.0, on x86 and have emerged (installed) chpax, gradm and selinux-base-policy. There was no /etc/grsec/acl so I created a basic one, and whenever I gradm -E, I get:

Error on line 2 of /etc/grsec/acl. Attempt to add an object without a subject declaration.
The RBAC system will not load until this error is fixed.

I'm not using sysctl, is this a problem? I can't find anything about this error anywhere, please help!!

Thanks

Alby

[devastor]

Without seeing the acl file I would guess that you are trying to
use grsecurity 1.9.x's default acl with grsecurity 2.x.

Default acl for grsecurity 2.x comes with gradm 2.x. (acl file in the source package)

The syntax has changed a bit in 2.x so 1.9.x's acl files can't be used without
some modifications..