grsecurity forums

I am new to grsecurity,

how do i make an acl to prevent top (/usr/bin/top) from being executed?

In acl I have
/usr/bin/top {
/usr/bin/top r
}

but it still lets me run top.

how do i correct it so top is disabled?

Who do you want to not be able to run top? Are you aware that someone could copy a 'top' program to somewhere they can write and execute and it would work the same as the regular top? Have you enabled /proc restrictions to restrict the viewing of processes to only the user's own programs? If you want to disable the execution of top for all people using the default ACL (I assume you're running 1.9) just add:

/usr/bin/top h

to the default ACL (that's the / { blahblah } one)

-Brad

Thanks, i just wanted to test the ACL with top to make sure it was working.