Starting up, rebooting, and halting?
Posted: Fri May 20, 2005 6:59 amHello all. I have just recently started using grsecurity 2.1.5 with kernel 2.4.30, on Slackware 10.1 I have not yet enabled learning mode, or done anything of that sort. I have installed gradm as told to do so in the grsecurity documentation.
However, there are a few questions I have ...
1. On each boot, it is necessary to enable the RBAC system by running gradm -E, correct? In this case, should I create an init script to start the RBAC system when entering multi-user run level?
2. On system shutdown or reboot, it is necessary to disable the RBAC system by running gradm -D, right? If not done, the system (for me, anyway) fails to shutdown; unmounting fails, and INIT fails to shut down all processes, leaving a terrible mess behind. Should I create an init script to shut down the RBAC system when entering runlevel 6 (my shutdown runlevel)?
Currently, I do not have my server set up the way I want it, at all. Should I wait until I am absolutely satisfied with my server before I run the learning level? Right now, a lot of processes are reporting errors (such as login, unable to access /var/log/wtmp, etc). Will these errors be fixed once I run the learning system for a day or so? In addition to these errors, I also get many errors from several programs (including programs like pkgtool) that look similar to that shown below; the bolded area is an error that is most common (I see it quite often during startup).
Any help or thoughts is appreciated.
-Jeff
However, there are a few questions I have ...
1. On each boot, it is necessary to enable the RBAC system by running gradm -E, correct? In this case, should I create an init script to start the RBAC system when entering multi-user run level?
2. On system shutdown or reboot, it is necessary to disable the RBAC system by running gradm -D, right? If not done, the system (for me, anyway) fails to shutdown; unmounting fails, and INIT fails to shut down all processes, leaving a terrible mess behind. Should I create an init script to shut down the RBAC system when entering runlevel 6 (my shutdown runlevel)?
Currently, I do not have my server set up the way I want it, at all. Should I wait until I am absolutely satisfied with my server before I run the learning level? Right now, a lot of processes are reporting errors (such as login, unable to access /var/log/wtmp, etc). Will these errors be fixed once I run the learning system for a day or so? In addition to these errors, I also get many errors from several programs (including programs like pkgtool) that look similar to that shown below; the bolded area is an error that is most common (I see it quite often during startup).
dialog: error while loading shared libraries: libncurses.so.5: cannot enable executable stack as shared object requires: Permission denied.
Any help or thoughts is appreciated.
-Jeff
. in short, your glibc is trying to honour PT_GNU_STACK while PaX doesn't.