grsecurity forums

I have a monitoring application that lives on a box w/grsecurity. I've got the ps listings restricted, but want to allow this application (which runs under its own non-root user) to be able to see the entire output of 'ps'. How can I do this?

Thanks,
-Jason Martin

have you enabled special group in kernel config? if so, add the user to this group and user will be able to view all processes.

regards,

Which exact option is this? I've looked through the 'make menuconfig' options and am not seeing it.

Ahh, found it. I had to uncheck 'restrict to user only' first, then the special group option became available.

Thanks!