[grsec] version mismatch

Erno Rigo mcree at tricon.hu
Mon Sep 6 03:03:53 EDT 2004


Hello,

I'm using kernel 2.6.7 wit grsecurity patch 2.0.1. I've also downloaded gradm2 
from the website, compiled and installed it.

# gradm -S says:
The RBAC system is currently disabled.

# gradm -v says:
gradm v2.0.1
Licensed under the GNU General Public License (GPL)
Copyright 2002,2003  Brad Spengler

# gradm -F -L /etc/grsec/learning.logs says:
You are using incompatible versions of gradm and grsecurity.
Please update both versions to the ones available on the website.

after the above command # ps aux | grep grlearn shows:
root      2037  0.0  2.4 12752 12752 pts/0   S<   08:48   
0:00 /sbin/grlearn /etc/grsec/learning.logs

but /etc/grsec/learning.logs stays 0 bytes long.

# md5sum /usr/src/grsecurity-2.0.1-2.6.7.patch /usr/src/gradm-2.0.1.tar.gz
4f94680f1600c6b79985dfb045847fe2  /usr/src/grsecurity-2.0.1-2.6.7.patch
3f4d8d524a55e35a7d06166f4f51f299  /usr/src/gradm-2.0.1.tar.gz

# md5sum /usr/src/linux-2.6.7.tar.bz2
a74671ea68b0e3c609e8785ed8497c14  /usr/src/linux-2.6.7.tar.bz2

/proc/sys/kernel/grsecurity does have files, all with "0"s. When I # echo 1 > 
chroot_findtask, and do a chroot, the process list becomes empty, so I guess 
the patch is working.

What have I done wrong?

-- 
Ernõ Rigó [McRee] - ICQ#63266198 - Tel#+36-20-5209965
--
You need to learn to be happy by nature, because you'll seldom have the chance 
to be happy by circumstance. /Lavetta Sue Wegman/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20040906/618d69a7/attachment.pgp


More information about the grsecurity mailing list