grsecurity forums

I have done a full system policy learn, but i need further refinement for a particular role. Setting the l flag for this role in the newly generated policy file, i get the folowing error message when checking with gradm -C :

"Subjects are not allowed for a role with learning enabled, as they are generated by the learning mode"

How can i teach this role without deleting the already learnt subjects?

This isn't currently supported. If you don't want to do full learning on that single role, your only other option is to enable per-subject learning.

-Brad