grsecurity forums

Ive runned:

gradm -F -L /etc/grsec/learning.log

And that worked, so now ive got my learning.log, but when im running:

root@Baalberith /etc/grsec # gradm -F -L learning.log -O learning.rules
Beginning full learning 1st pass...done.
Beginning full learning role reduction...done.
Beginning full learning 2nd pass...Killed

and learning.rules is empty ..
anyone got an idea about that ?

How large is the log file?

-Brad

Having the same problem...
With logfile of some more days, it even hardly gets into the 2nd pass.

root@*****:/etc/grsec# gradm -FL /etc/grsec/acl_learning.LOG -O policy
Beginning full learning 1st pass...done.
Beginning full learning role reduction...done.
Beginning full learning 2nd pass...done.
Beginning full learning subject reduction for user root...done.
Beginning full learning subject reduction for user fre...done.
Beginning full learning subject reduction for user fcoen...done.
Beginning full learning subject reduction for user dvandijck...done.
Beginning full learning subject reduction for user www-data...done.
Beginning full learning subject reduction for user mail...done.
Beginning full learning subject reduction for user dave...done.
Beginning full learning subject reduction for user bin...done.
Beginning full learning subject reduction for user mysql...done.
Beginning full learning 3rd pass...Killed

root@*****:/etc/grsec# ls -ltra
total 87752
...
-rw------- 1 root root 89731425 Sep 30 14:29 acl_learning.LOG
...

I've noticed gradm consumes very large amounts of memory,
filling up the whole paging-space, untill the process gets killed.

Mem: 254944K total, 250648K used, 4296K free, 248K buffers
Swap: 594396K total, 555684K used, 38712K free, 2900K cached

PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME COMMAND
11390 root 9 0 744M 224M 528 D 63.7 90.3 2:42 gradm

seconds later... KILLED