[grsec] sufficient learning?

[Igor Gueths]

Hi all. I've recently started to tinker with the RBAC system, and finding that the hardest thing to get working properly once RBAC is enabled is Postfix. I've since resorted to full learning 
mode, after finding out that 46 MB worth of learn.log wasn't enough. Is there a way to make sure that learning mode has found out all it could, or is it a case of looking through the logs of 
every daemon in use and going from there? My server is relatively low-traffic, so it might be learning for a few days. Perhaps another way is to grep learn.log after disabling the system, for 
every installed Daemon to see if it has been profiled in some way yet? Am I already doing/should perhaps be doing more to ensure complete learning? Thanks!
-- 
How many chunks could checkchunk check if checkchunck could check chunks?
-- Alan Cox
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 827 bytes
Desc: not available
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20050510/1b1c910d/attachment.pgp