[grsec] Simple /etc/grsec/policy question

[ixion]

Hey everyone,

Have finally delved into the RBAC system, and I have to say I am amazed
at the flexibility and functionality of /etc/grsec/policy, WOW!

I may have goofed up a bit in getting this rolling, though. I didn't
have a user jump to admin role while learning, and now am locked out
once grsec is enabled:

# gradm -a admin
-bash: /sbin/gradm: Permission denied

What parameters are needed in the policy file to enable a certain user
grsec admin privs?

Thank you all for your patience with a grsec n00b.

Cheers!