grsecurity forums

install grsec and gradm no problems.

My problem is taking gradm out or learning mode:

debi:~# ./learnstart.sh
debi:~# ./learnstop.sh
Unable to open /etc/grsec/acl for writing.
Error: No such file or directory
debi:~# gradm -S
The RBAC system is currently enabled.
debi:~# pico learnstop.sh

GNU nano 1.2.4 File: learnstop.sh

#!/bin/sh
gradm -F -L /etc/grsec/learning.log -O /etc/grsec/acl

If i make the file acl myself...it still does not recognise it.

Any help would be apprceiated!

OK figured out that i had to disable gradm before i could write the file

remember that the policy file is /etc/grsec/policy, not /etc/grsec/acl. I've fixed the last two dangling references to /etc/grsec/acl in gradm (though they weren't ones that suggested that /etc/grsec/acl was the policy file).

-Brad