grsecurity forums

to save getting all these permission denied errors etc.. is there a 'superuser' group or something similar you can add users to?

also, when loading up Xwindows and not having grsec enabled (gradm -D) i get a:

Fatal server error:
xf86EnableOPorts: Failed to set IOPL for I/O

is this a common problem?

cwr wrote:to save getting all these permission denied errors etc.. is there a 'superuser' group or something similar you can add users to?

please what?

cwr wrote:also, when loading up Xwindows and not having grsec enabled (gradm -D) i get a:

Fatal server error:
xf86EnableOPorts: Failed to set IOPL for I/O

is this a common problem?

grep CONFIG_GRKERNSEC_IO .config

if it's yes (y), then read the Configure help of that entry, named "Disable privileged I/O".

ciao, Marc

ok, thanks.

what can you put in the /etc/grsec/acl to protect the kernel rather than enabling that option?

cwr wrote:ok, thanks.

what can you put in the /etc/grsec/acl to protect the kernel rather than enabling that option?

You can remove the capability "CAP_SYS_RAWIO".

http://www.grsecurity.net/gracldoc.htm

ciao, Marc

That error can also be caused by PaX, I believe. Check your logs and look for something starting with grsec: PAX:, then download chpax from http://pageexec.virtualave.net, and chpax -sp /usr/X11R6/bin/XFree86.

-Brad