grsecurity forums

I made a special role which default subject allows access to standard /etc and /proc files to increase ACL's lisibility and reduce reddundancy in each process (/etc/localtime, /etc/ld.so.cache, ....). I want some process to be auto-granted that specific role...

I was wondering how I could auto assign a special role when a program (identified by its path) is launched. Any idea ?

Make it a role that doesn't require authentication, and make some wrapper program that execs gradm -n <rolename>, which will automatically switch to the special role.

-Brad

Ok thanks