grsecurity forums

Hi,

I get the following error message every few seconds in my syslog and was wondering how to get rid of it:

grsec: denied kernel module auto-load of ansi_cprng by uid 1000
grsec: denied kernel module auto-load of drbg by uid 1000


I am running archlinux with the grsec kernel

First ensure these are legitimate requests. If they're caused by one of your apps using the kernel's crypto API, the way to solve it is easy. Simply add:

modprobe ansi_cprng
modprobe drbg

to some init script, or otherwise force the loading of those modules as root during boot. Grsecurity's MOD_HARDEN feature prevents the runtime auto-loading of modules by unprivileged users for security reasons.

-Brad

How do I find out what process requested those modules?