grsecurity forums

Hi

I installed debian etch 4.0 with grsecurity , when I try gradm -E i have error message

gradm -E
Duplicate subject found for "/sbin/gradm" in role bsadmin, on line 1608 of /etc/grsec/policy.
"/sbin/gradm" references the same object as "/sbin/gradm" specified on an earlier line.

line 1608
subject /sbin/gradm {
/ h
/sbin/gradm x
/etc/ld.so.cache r
-CAP_ALL
}

I check all policy file and I don't find the same line entry

Where is the error?

You don't need to add a policy for gradm. It is automatically added by the RBAC system.

-Brad

spender wrote:You don't need to add a policy for gradm. It is automatically added by the RBAC system.

-Brad

Hi

If it's automatically add how I can add this,where I add +CAP_SYS_ADMIN?

grsec: From 192.168.1.50: (root:U:/sbin/gradm) use of CAP_SYS_ADMIN denied for /sbin/gradm[gradm:8341] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[bash:8284] uid/euid:0/0 gid/egid:0/0

osa

gradm should not need CAP_SYS_ADMIN. What action were you performing to make it generate that log?

-Brad

When I used this command gradm -D I have this error on console