1 |
-----BEGIN PGP SIGNED MESSAGE----- |
2 |
Hash: SHA256 |
3 |
|
4 |
|
5 |
Okay, if grsec's RBAC system denies the write (or whatever operation), the |
6 |
syslog entry will show which role that the process is currently using. |
7 |
Whichever role it is (probably root), it'll need the right permissions in |
8 |
/etc/grsec/policy. |
9 |
|
10 |
The error message is the key... ;) |
11 |
|
12 |
|
13 |
brant williams |
14 |
FCAA CDCA 20BC 3925 D634 F5C4 7420 6784 4DEB 6002 |
15 |
|
16 |
|
17 |
|
18 |
On Mon, 31 Dec 2007, Peter Humphrey wrote: |
19 |
|
20 |
> Date: Mon, 31 Dec 2007 16:48:33 +0000 |
21 |
> From: Peter Humphrey <prh@××××××××××.uk> |
22 |
> Reply-To: gentoo-hardened@l.g.o |
23 |
> To: gentoo-hardened@l.g.o |
24 |
> Subject: Re: [gentoo-hardened] How to set up for chrony? |
25 |
> |
26 |
> On Monday 31 December 2007 16:39:30 brant williams wrote: |
27 |
> |
28 |
>> If grsec is denying the write, it should show up in your syslog. |
29 |
> |
30 |
> That's where I found the error message. |
31 |
> |
32 |
>> Are you running grsec's RBAC system? |
33 |
> |
34 |
> Yes; what would you like to know about it? |
35 |
> |
36 |
>> Can you paste the error you're referring to? |
37 |
> |
38 |
> Ah. No, not at the moment. I uninstalled it, so I'll have to reinstall it to |
39 |
> try it again. |
40 |
> |
41 |
> -- |
42 |
> Rgds |
43 |
> Peter |
44 |
> -- |
45 |
> gentoo-hardened@g.o mailing list |
46 |
> |
47 |
> |
48 |
-----BEGIN PGP SIGNATURE----- |
49 |
Version: GnuPG v2.0.7 (GNU/Linux) |
50 |
|
51 |
iD8DBQFHeSWtdCBnhE3rYAIRCF/3AJwLzS4JACbA+Sz+B7Puf/e5UHdI7gCfRbNq |
52 |
G/t4Mtna0mJWptgH6kL5/Gg= |
53 |
=Mtpt |
54 |
-----END PGP SIGNATURE----- |
55 |
-- |
56 |
gentoo-hardened@g.o mailing list |