grsecurity forums

Hi, all.

I have debian 6.0 with 2.6.32.57 and 3.2.7 vanilla kernels patched with grsecurity patch. I got gradm 2.9 source from grsecurity.net. When I tried to do gradm -F -L /etc/grsec/learning.logs, i got next message on a console:

Code: Select all

You are using incompatible versions of gradm and grsecurity.
Please update both versions to the ones available on the website.
Make sure your gradm has been compiled for the kernel you are currently running.


and in dmesg:

Code: Select all

grsec: From 192.168.1.1: /dev/grsec: 12 bytes sent 16 required, being fed garbaged by /sbin/gradm[gradm:1161] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[bash:1157] uid/euid:0/0 gid/egid:0/0
grsec: From 192.168.1.1: /dev/grsec: 12 bytes sent 16 required, being fed garbaged by /sbin/gradm[gradm:1161] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[bash:1157] uid/euid:0/0 gid/egid:0/0


This messages are the same on both kernels. What do i make wrong?

I have 64 bit kernels and 32 bit userland, so i made next changes in Makefile of gradm:

Code: Select all

-LIBS := $(shell if [ "`uname -m`" != "sparc64" -a "`uname -m`" != "x86_64" ]; then echo "-lfl"
; else echo "" ; fi)
-OPT_FLAGS := $(shell if [ "`uname -m`" != "sparc64" ] && [ "`uname -m`" != "x86_64" ]; then echo "-O2" ; else echo "-O2 -m64" ; fi)
+#LIBS := $(shell if [ "`uname -m`" != "sparc64" -a "`uname -m`" != "x86_64" ]; then echo "-lfl" ; else echo "" ; fi)
+LIBS := -lfl
+#OPT_FLAGS := $(shell if [ "`uname -m`" != "sparc64" ] && [ "`uname -m`" != "x86_64" ]; then echo "-O2" ; else echo "-O2 -m64" ; fi)
+OPT_FLAGS := -O2


Did that change fix your problem?

-Brad

No. This was a step to simply make gradm in my 32 bit userland. Without it gradm refused to compile at all.

But, I forgot to say that grlearn run after this command regardless of this error message.

Can you show me the output of: 'file /sbin/gradm'?

-Brad

You need to be able to build a 64bit version of gradm, which is what the Makefile was designed to do. gradm currently requires itself to be 64bit when run on a 64bit kernel.

-Brad

In 64 bit Debian it work. gradm -S show me:

Code: Select all

The RBAC system is currently enabled


But grlearn is not running. Is it ok?

You won't be able to see grlearn except in the admin role.

-Brad