grsecurity forums

Hello
I am having problems setting acls for colfusion

I am usign this learning mode :
/opt/coldfusion/ lo {
/ h
-CAP_ALL
}

also tried
/opt/coldfusion/bin/cfserver lo {
/ h
-CAP_ALL
}

and
/opt/coldfusion lo {
/ h
-CAP_ALL
}

But it blocks on
denied load of writable library /dev/zero by (cfserver:1798) UID(99) EUID(99),parent (cfserver:1792) UID(99) EUID(99)

99 = nobody the user cold fusion is run under
same as the apache server

if any idea thx

You'll have to add "O" (capital oh) to the subject mode. The problem is actually because cold fusion is being silly and mmap'ing /dev/zero with write and execute.

-Brad