aa-status "You do not have enough privilege to read the prof

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

aa-status "You do not have enough privilege to read the prof

Postby GBit » Wed Jun 12, 2013 10:10 pm

If I type in aa-status I get:
You do not have enough privilege to read the profile set.

This is a root terminal.

http://pastebin.com/hsSqda1h

Ubuntu 13.04, 3.9.5. This has been happening for a long time now, maybe as far back as 3.2. Can't remember.
GBit
 
Posts: 81
Joined: Mon Jun 04, 2012 3:31 pm


Re: aa-status "You do not have enough privilege to read the

Postby spender » Thu Jun 13, 2013 7:56 am

Those instructions apply to 3.2 (and I'm including the compat patches there in the next patch). I've checked the 3.9 code though and it's essentially the same as Ubuntu's 3.8 kernel. Do you have AppArmor enabled?

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Re: aa-status "You do not have enough privilege to read the

Postby GBit » Thu Jun 13, 2013 12:17 pm

Yeah, it's initialized.

I'll wait for you to add the patch I suppose, as I've just now compiled 3.9.5. It's not a big issue, since it's still enforcing.

Thanks.
GBit
 
Posts: 81
Joined: Mon Jun 04, 2012 3:31 pm

Re: aa-status "You do not have enough privilege to read the

Postby spender » Thu Jun 13, 2013 12:48 pm

There must be something else going on with 3.9 then. Could you try a vanilla 3.9.5 kernel?

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Re: aa-status "You do not have enough privilege to read the

Postby GBit » Thu Jun 13, 2013 12:51 pm

I can't try it at the moment, but it's been going on for ages. Way before 3.9. I've been using Grsecurity since at least 3.2 and it's been this way since day one.

But my results seem to be the same as the topic creator at serverfault.com, if the patch fixes it for him I'd imagine it fixes it for me too, right?
GBit
 
Posts: 81
Joined: Mon Jun 04, 2012 3:31 pm

Re: aa-status "You do not have enough privilege to read the

Postby GBit » Sun Jun 30, 2013 12:54 am

Fixed in the last patch.
GBit
 
Posts: 81
Joined: Mon Jun 04, 2012 3:31 pm


Return to grsecurity support

cron