grsecurity forums

mikeeusa wrote:SSH server nolonger works once gradm is on (used to work before upgrades, I also updated the policy for the new glibc and friends so that probably isn't the cause).

check your root role again, it doesn't give access to /usr/lib/i686/cmov, only /usr/lib/i686 (it'd probably be better to make use of the include feature and have common ACLs for common subjects like sshd).

mikeeusa wrote:I've add the cmov line to everything that had a /usr/lib/i686 line, it still doesn't work:

you enabled visibility of the directory name only, you didn't actually give access to the files in it. i suggest that you check out your other sshd subjects for comparison.