grsecurity forums

with grsec 1.9 you could put something like this in the acl to include a directory of other acls:

include </etc/grsec/acls>

This doesn't work with grsec 2.0. I'm wondering if there's a way to do it with 2.0

Thanks in advance for your time,

--jesse

ras wrote:with grsec 1.9 you could put something like this in the acl to include a directory of other acls:
include </etc/grsec/acls>
This doesn't work with grsec 2.0. I'm wondering if there's a way to do it with 2.0
Thanks in advance for your time,

Imho there's no way but I could be wrong (I wish I am wrong).

Brad?

ciao, Marc

ras wrote:with grsec 1.9 you could put something like this in the acl to include a directory of other acls:

include </etc/grsec/acls>

check the source code (gradm2/gradm.l), the add_include() function explicitly denies including directories, you should in fact have seen the error message when you tried it...