grsecurity forums

Hi,

Just wondering whether the recommended way to shutdown a grsecurity box that has ACLs enabled is to disable the ACLs first with gradm, or has anyone had luck in writing an ACL that allows a clean shutdown? (With the LIDS security system, I've used the former method, but I'm not sure if that is practical with grsec)

Regards,

Campbell

It would be best to have a script that is allowed to stop all remote services, stop cron, then do a killall, then disable the RBAC system, then issue the shutdown command.

-Brad