Trouble with gradm learn

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Trouble with gradm learn

Postby bobdog » Wed Sep 29, 2004 3:40 am

Ive runned:

gradm -F -L /etc/grsec/learning.log

And that worked, so now ive got my learning.log, but when im running:

root@Baalberith /etc/grsec # gradm -F -L learning.log -O learning.rules
Beginning full learning 1st pass...done.
Beginning full learning role reduction...done.
Beginning full learning 2nd pass...Killed

and learning.rules is empty ..
anyone got an idea about that ?
bobdog
 
Posts: 1
Joined: Wed Sep 29, 2004 3:33 am

Postby spender » Wed Sep 29, 2004 12:41 pm

How large is the log file?

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Postby fre » Thu Sep 30, 2004 4:46 am

Having the same problem...
With logfile of some more days, it even hardly gets into the 2nd pass.

root@*****:/etc/grsec# gradm -FL /etc/grsec/acl_learning.LOG -O policy
Beginning full learning 1st pass...done.
Beginning full learning role reduction...done.
Beginning full learning 2nd pass...done.
Beginning full learning subject reduction for user root...done.
Beginning full learning subject reduction for user fre...done.
Beginning full learning subject reduction for user fcoen...done.
Beginning full learning subject reduction for user dvandijck...done.
Beginning full learning subject reduction for user www-data...done.
Beginning full learning subject reduction for user mail...done.
Beginning full learning subject reduction for user dave...done.
Beginning full learning subject reduction for user bin...done.
Beginning full learning subject reduction for user mysql...done.
Beginning full learning 3rd pass...Killed

root@*****:/etc/grsec# ls -ltra
total 87752
...
-rw------- 1 root root 89731425 Sep 30 14:29 acl_learning.LOG
...
fre
 
Posts: 3
Joined: Thu Sep 30, 2004 4:43 am

Postby fre » Thu Sep 30, 2004 5:10 am

I've noticed gradm consumes very large amounts of memory,
filling up the whole paging-space, untill the process gets killed.

Mem: 254944K total, 250648K used, 4296K free, 248K buffers
Swap: 594396K total, 555684K used, 38712K free, 2900K cached

PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME COMMAND
11390 root 9 0 744M 224M 528 D 63.7 90.3 2:42 gradm

seconds later... KILLED
fre
 
Posts: 3
Joined: Thu Sep 30, 2004 4:43 am


Return to grsecurity support