grsecurity forums

Hi all! Is it possible to check global status or current subject's status? Something like apparmor_status, but more verbose:
http://cdn8.howtogeek.com/wp-content/up ... 3Zo1Be.png

And individual subject status, like this

Code: Select all

$ gradm-status --subject /usr/bin/firefox
Roles:
* default
* pallas
* pallas [group]
* testuser


Code: Select all

$ gradm-status --pid 4324
Subject:
/usr/bin/firefox
Current role:
pallas


I think, it might be very useful for sysadmins (for those who get already configured servers with grsecurity) and for monitoring.

you can do something like:

Code: Select all

grep RBAC /proc/11068/status


which will tell you something like:

Code: Select all

RBAC:   default:D:/usr/sbin/apache2


making a shell or perl script which would do the same for the subject (instead of PID as example above) is left as an exercise for a sysadmin...

Thank you! That what I need.