Starting up, rebooting, and halting?

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Starting up, rebooting, and halting?

Postby jfw2005 » Fri May 20, 2005 6:59 am

Hello all. I have just recently started using grsecurity 2.1.5 with kernel 2.4.30, on Slackware 10.1 I have not yet enabled learning mode, or done anything of that sort. I have installed gradm as told to do so in the grsecurity documentation.

However, there are a few questions I have ...

1. On each boot, it is necessary to enable the RBAC system by running gradm -E, correct? In this case, should I create an init script to start the RBAC system when entering multi-user run level?
2. On system shutdown or reboot, it is necessary to disable the RBAC system by running gradm -D, right? If not done, the system (for me, anyway) fails to shutdown; unmounting fails, and INIT fails to shut down all processes, leaving a terrible mess behind. Should I create an init script to shut down the RBAC system when entering runlevel 6 (my shutdown runlevel)?

Currently, I do not have my server set up the way I want it, at all. Should I wait until I am absolutely satisfied with my server before I run the learning level? Right now, a lot of processes are reporting errors (such as login, unable to access /var/log/wtmp, etc). Will these errors be fixed once I run the learning system for a day or so? In addition to these errors, I also get many errors from several programs (including programs like pkgtool) that look similar to that shown below; the bolded area is an error that is most common (I see it quite often during startup).
dialog: error while loading shared libraries: libncurses.so.5: cannot enable executable stack as shared object requires: Permission denied.


Any help or thoughts is appreciated. :)

-Jeff
jfw2005
 
Posts: 2
Joined: Fri May 20, 2005 6:47 am

Re: Starting up, rebooting, and halting?

Postby PaX Team » Fri May 20, 2005 4:40 pm

jfw2005 wrote:
dialog: error while loading shared libraries: libncurses.so.5: cannot enable executable stack as shared object requires: Permission denied.


Any help or thoughts is appreciated. :)
search feature of the forum is highly recommended ;-). in short, your glibc is trying to honour PT_GNU_STACK while PaX doesn't.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: Starting up, rebooting, and halting?

Postby jfw2005 » Fri May 20, 2005 5:32 pm

PaX Team wrote:
jfw2005 wrote:
dialog: error while loading shared libraries: libncurses.so.5: cannot enable executable stack as shared object requires: Permission denied.


Any help or thoughts is appreciated. :)
search feature of the forum is highly recommended ;-). in short, your glibc is trying to honour PT_GNU_STACK while PaX doesn't.


Yeah, after I posted, I did some searching on the forum, and found this out ... I'm still trying to get prelink installed; prelink is broken and won't work with libelf, and the replacement elfutils is not very centralized and hard to get, but I'll eventually get it going so I can fix the packages...

Heh, oddly enough, when I compiled libelf and prelink on my non-grsec kernel, they worked fine. :-/

As for my other question about start up / shut down, I didn't search the forum ... is this answered elsewhere too? ;)

-Jeff
jfw2005
 
Posts: 2
Joined: Fri May 20, 2005 6:47 am


Return to grsecurity support