policy error

[phaceton]

Hello--

I have compiled a grsecurity kernel for Ubuntu Edgy.
When i run:"gradm -E" i get the following error message:"Error on line 4 of /etc/grsec/policy. Attempt to add an object without a subject declaration.
The RBAC system will not load until this error is fixed."

This is the content of the file in question:

#sample default process acl for grsecurity

/ {
/ r
/opt rx
#/home rwx
/mnt rw
/dev
/dev/urandom r
/dev/random r
/dev/zero rw
/dev/input rw
/dev/psaux rw
/dev/null rw
/dev/tty? rw
/dev/console rw
/dev/tty rw
/dev/ttyp? rw
/dev/pts rw
/dev/ptmx rw
/dev/dsp rw
/dev/mixer rw
/dev/fd0 r
/dev/cdrom r
/dev/mem h
/dev/kmem h
/dev/port h
/bin rx
/sbin rx
/lib rx
/usr rx
/etc rx
/etc/ssh h
/proc rwx
/proc/kcore h
/proc/sys r
/root r
/tmp rw
/var rwx
/var/tmp rw
/var/log r
/boot h
/etc/grsec h

-CAP_SYS_TTY_CONFIG


etc etc

"/etc/grsec/policy" 106L, 1241C 1,1 Top

Because this is apparantly an exemple policy file i don't understand the error.

[spender]

You're using a sample policy from gradm 1.x. Copy the policy file out of the gradm2 source tree into /etc/grsec.

-Brad