grsecurity forums

Hello everyone,


For a school project I need to secure an Ubuntu 12.04 server with Grsecurity. The only thing that needs to work pretty much is tomcat6 however I keep getting diffrent errors after compiling. Latest one being a read-online message from my Catalina within tomcat.

Which option is the one I need to disable in order for tomcat6 to fully work?

Thanks

If you disable an option, I will find your professor and have them fail you!

Just kidding (or am I?!)

Check your kernel logs, there's likely a termination message from PaX due to PAX_MPROTECT being enabled on java. Instead of disabling that option completely, disable it only on java (which I assume to be the culprit, your logs may show otherwise). How to do this disabling is your homework -- search the forums, there are several posts about this.

-Brad

Hello Brad,

Thanks for your reply! I already compiled the kernel once with PaX fully disabled, however, I got the same read-only message from catalina.... English is not my native language so I might have not fully understood what you're trying to say.

I use the makemenu tool for compiling btw, and in that gui I compiled it once with PaX fully disabled... I am also trying diffrent things now with others options disabled..


Any other things that might cause it to not run ?

Thanks

..

Think I found the reason... Ill keep you updated