grsec & supervise scripts

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

grsec & supervise scripts

Postby Joel » Fri Apr 11, 2003 12:48 pm

Hi.
I am having a problem with supervise from svcscan and grsec 1.9.9f. It does not happen with previous versions of grsec.
I am getting messages like these:

ID(0) EUID(0), parent (svscan:19585) UID(0) EUID(0)
Apr 10 16:04:34 web6 kernel: grsec: denied execution of /service/qmail-send/run by (supervise:15622) UID(0) EUID(0), parent (supervise:23739) UID(0) EUID(0)

Apr 10 16:04:35 web6 kernel: grsec: denied open of /service/qmail-send/supervise/status.new for writing by (supervise:23739) UID(0) EUID(0), parent (svscan:19585) UID(0) EUID(0)

Any ideas on which grsec option may be creating this problem ?
ACL's are disabled.

Thanks in advance.
Joel
 
Posts: 10
Joined: Mon Jun 17, 2002 11:01 am

Return to grsecurity support