[grsec] gradm2 2.0.1 and grsec 2.0.1 bug with enabling RBAC

spender at grsecurity.net spender at grsecurity.net
Fri Oct 29 16:08:04 EDT 2004


> if (write(fd, buf, sizeof(struct gr_arg_wrapper)) != sizeof(struct gr_arg_wrapper)) {
> 
> in transmit_to_kernel, while the kernel code in write_grsec_handler for the
> STATUS mode does the following:
> 
> switch (gr_usermode->mode) {
>         case STATUS:
>                         if (gr_status & GR_READY)
>                                 error = 1;
>                         else
>                                 error = 2;
>                         goto out;

But transmit_to_kernel isn't called when we're checking status, 
check_acl_status is called; so this can't be the problem.  What grsec 
log do you get when you see the error?  Can you have gradm print the 
return value?

-Brad


More information about the grsecurity mailing list