grsecurity && capsel

[xian]

Hi
I found situation which I cannot solve by myself. I've used capsel security module (see cliph.linux.pl). This module provides security mechanisms based on capabilities, it DOES NOT modify any proc regarding functions. Compiling kernel eg 2.4.18 with grsecurity with or without grsecurity then insmod'ing capsel cause all files in /proc become root:root it brokes all functionality of /proc filesystem restricting user access to his file descriptors ...
I've contacted capsel developer , now I'm asking You for help.
Greetings
xian

[michaeld]

Uh, capsel tries to do much of what grsecurity does, except we generally do it in a more robust manner. Perhaps the two are conflicting since we have overlapping features. I will examine it more closely tonight (although the /proc
modifications in grsec are not my domain heh :D).