grsecurity forums

I recently went from 1.9.5 to 1.9.7-rc5.
Firstly, I've noticed the "fchdir outside of chroot to root" option seems to break daemon tools, or more specifically, dnscache under daemontools. I guess this was intended as daemontools did something nasty.. I've just disabled this option.

I've also got this log from every bootup:

Sep 13 16:46:40 gotenks kernel: Loaded 16622 symbols from /boot/System.map.
Sep 13 16:46:40 gotenks kernel: Symbols match kernel version 2.4.19.
Sep 13 16:46:40 gotenks kernel: Error opening /dev/kmem
Sep 13 16:46:40 gotenks kernel: Error adding kernel module table entry.

What's trying to open /dev/kmem here... and how broken is my system after it being denied?

Finally, since the update, I get a printconf-backend seg fault as it gets called from the lpd startup script. Nothing at all is logged regarding this issue, just the message to screen.
Despite giving the big green "OK" LPD doesn't actually start.
Now for something really weird.. just re-running the script causes it to work flawlessly. It's like it just doesn't like being done at bootup.
Any ideas?

I can only answer your /dev/kmem question (although I am planning to install dnscache in the next few days): it is being opened by klogd. I think you can live without allowing it. AFAIK it is only used for resolving the addresses of the loaded modules in the kernel logs.

Akos