Grsecurity + Tomcat6

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Grsecurity + Tomcat6

Postby Redefine » Wed Apr 24, 2013 6:19 am

Hello everyone,


For a school project I need to secure an Ubuntu 12.04 server with Grsecurity. The only thing that needs to work pretty much is tomcat6 however I keep getting diffrent errors after compiling. Latest one being a read-online message from my Catalina within tomcat.

Which option is the one I need to disable in order for tomcat6 to fully work?

Thanks
Redefine
 
Posts: 4
Joined: Wed Apr 24, 2013 6:15 am

Re: Grsecurity + Tomcat6

Postby spender » Wed Apr 24, 2013 10:23 am

If you disable an option, I will find your professor and have them fail you!

Just kidding (or am I?!)

Check your kernel logs, there's likely a termination message from PaX due to PAX_MPROTECT being enabled on java. Instead of disabling that option completely, disable it only on java (which I assume to be the culprit, your logs may show otherwise). How to do this disabling is your homework -- search the forums, there are several posts about this.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Re: Grsecurity + Tomcat6

Postby Redefine » Wed Apr 24, 2013 10:53 am

Hello Brad,

Thanks for your reply! I already compiled the kernel once with PaX fully disabled, however, I got the same read-only message from catalina.... English is not my native language so I might have not fully understood what you're trying to say.

I use the makemenu tool for compiling btw, and in that gui I compiled it once with PaX fully disabled... I am also trying diffrent things now with others options disabled..


Any other things that might cause it to not run ?

Thanks
Redefine
 
Posts: 4
Joined: Wed Apr 24, 2013 6:15 am

Re: Grsecurity + Tomcat6

Postby Redefine » Wed Apr 24, 2013 11:04 am

..
Last edited by Redefine on Wed Apr 24, 2013 2:25 pm, edited 1 time in total.
Redefine
 
Posts: 4
Joined: Wed Apr 24, 2013 6:15 am

Re: Grsecurity + Tomcat6

Postby Redefine » Wed Apr 24, 2013 2:20 pm

Think I found the reason... Ill keep you updated :)
Redefine
 
Posts: 4
Joined: Wed Apr 24, 2013 6:15 am


Return to grsecurity support