grsecurity forums

I'm currently trying to install grub on my software raid 1.

However when trying to write the MBR I'll get this error:

grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /sbin/grub[grub:25437] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[bash:18402] uid/euid:0/0 gid/egid:0/0

How do I make gresec allow grub to write to the MBR?

sorry, complete noob on grsec.

thx for your help

*edit* issue solved. PAX didn't like grub, so one has to disable certain flags.

so it's either
chpax -spm /usr/sbin/grub (for older systems which still use one of the earlier grsecurity kernel patches) or
paxctl -spm /usr/sbin/grub for newer systems

I thought of deleting this question, however I had a hard time googling it up so I thought that posting the solution here is better since someone else with the problem might find it easier

hi i think chpax is not to be used now you should use paxctl though sometimes i have to use the -c switch otherwise it dont work

hope this help

zero_Joker wrote:grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /sbin/grub[grub:25437] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[bash:18402] uid/euid:0/0 gid/egid:0/0

this just says that grub crashed, but doesn't tell the reason. you'd have to enable coredumping and get some info out of it, search the forum or the list for instructions on how to do that. as for grub itself, what version is this? here i have 0.97 on a gentoo box and it works with full PaX enabled on it.