grsecurity forums

hi! me again i just upgraded to 1.9.9-rc3 with the latest devel gradm ...
now my xwin is unuseable?
my ACL for it is:
/usr/X11R6/bin/XFree86 SP {
/var/log/XFree86.0.log rw
/var/log/XFree86.1.log rw
/dev/mem rw
/dev/nvidiactl rw
/dev/nvidia0 rw

+CAP_CHOWN
+CAP_SETUID
+CAP_SETGID
+CAP_DAC_OVERRIDE
+CAP_SYS_RAWIO
+CAP_SYS_MODULE
+CAP_SYS_NICE
+CAP_SYS_TTY_CONFIG
+CAP_IPC_OWNER
}
which is the default xfree86 acl distributed with gradm.
the error that i get from xwin:
Fatal server error:
xf86EnableIOPorts: Failed to set IOPL for I/O
what gives?

vpolyakov wrote:what gives?

read the configure help on CONFIG_GRKERNSEC_IO (you'll want to disable it probably).