[grsec-2.2.1-2.6.37 no RBAC] gradm can't open /dev/grsec

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

[grsec-2.2.1-2.6.37 no RBAC] gradm can't open /dev/grsec

Postby pas » Wed Mar 09, 2011 1:34 am

Hello!

I've finally found some time to patch and configure a new kernel, at first it was a breeze, even managed to package it and get it onto an other box where I'd rather have no gcc & co. I've tried to package gradm too, and had some success (it seems to support $(DISTDIR) and dh_make and debuild kindly provided me with a package after all, but it could be broken as there aren't any udev rules in the package).

Then gradm gives me the error about the failed open syscall pointing to /dev/grsec. (/dev/grsec is there with major,minor being 1,13.) My question is, could this be because I have disabled RBAC during configuration, or it's because my half-assed packaging attempt? (Any way to list the registerd major,minor numbers? Or at least grep it easily from the .patch?)

Thanks in advance!
pas
 
Posts: 2
Joined: Wed Mar 09, 2011 1:15 am

Re: [grsec-2.2.1-2.6.37 no RBAC] gradm can't open /dev/grsec

Postby spender » Wed Mar 09, 2011 6:04 pm

My tarball of gradm should have support in the makefile for creating the proper udev rules. I'm not exactly clear why you're running gradm on a system with RBAC disabled. Is it to test the 'make install' part of installing gradm? This runs gradm -P at the end of the installation, which will fail with an error if you do it on a system with RBAC disabled.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Re: [grsec-2.2.1-2.6.37 no RBAC] gradm can't open /dev/grsec

Postby pas » Wed Mar 09, 2011 9:00 pm

I'm not exactly clear why you're running gradm on a system with RBAC disabled.


Basically, that's my question. Is it normal for gradm to fail as I've described if RBAC is disabled or not?
pas
 
Posts: 2
Joined: Wed Mar 09, 2011 1:15 am

Re: [grsec-2.2.1-2.6.37 no RBAC] gradm can't open /dev/grsec

Postby spender » Thu Mar 10, 2011 9:38 am

Yes, it's normal.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to grsecurity support