People who code: we want your input. Take the Survey

Questions tagged [grsec]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
233 views

Grsecurity: grant user permission to see all processes (Debian Jessie)

When Debian Jessie is compiled with grsecurity, a simple user can't see all processes. Therefore tasks carried out by Sensu client (monitoring and telemetry solution) can't see if another processes (...
1
vote
1answer
37 views

How to enable RBAC automatically

I think I'm missing something simple, but every time I try to gradm -E, I'm being asked for a password. How can I enable it automatically after boot? (so that no password is needed)
1
vote
0answers
93 views

Segmentation faults in hardened ubuntu

I am running Ubuntu Linux 14.04 webserver and it has grsec patch applied. Absolutely randomly websites become unaccessible and i seeing segmentation faults in dmesg. May i temporary or permanently ...
2
votes
2answers
218 views

How do I override grsec?

After a reboot recently, I have a pair of servers that are now unable to monitor their disk status. Nagios reports: HP RAID Array UNKNOWN Error: No controllers detected. -/-/- (LD : []) I get the ...
2
votes
2answers
444 views

can not run java inside grsec chroot

java runs well inside common chroot. however in a grsec hardened chroot it complains it has no enough memory to build VM. any ideas of how to make it run cause i really need a hardened chroot. ...
0
votes
1answer
96 views

Subversion - changing way of handling hooks

My hosting provider had enabled Trusted Path Execution (Grsec), so all my subversion hooks (for example post-commit) stopped working. Any attempt to commit something ends with warning: post-commit ...
0
votes
1answer
158 views

GRSEC Not allowing Active FTP on Privileged ports

I've been testing an issue with FTP Active transfers recently and I've narrowed down a problem. On my GRSEC enabled kernel, FTP Active transfers fail to establish on Privileged ports. Using identical ...
0
votes
1answer
317 views

grsecurity effieffectiveness test with latest proftpd remote exploit

i just tested grsecurity. i installed debian and a vulnerable version of proftpd. i launched an exploit. worked. patched the latest kernel with grsec. and now the exploit doesnt work anymore. BUT . ...
1
vote
2answers
618 views

How to block users from seeing others processes?

Generally it's one of the functionalities of (For example) grsecurity - user sees only his own processes, and not all others. But - I'd prefer to avoid installing grsecurity - perhaps something like ...
2
votes
5answers
379 views

controlling a linux box behind a router

I am trying to make it possible to control a shell on a linux box behind a router which is not under my control. My first idea was to make the client (the box behind the router) to ssh to a server ...
1
vote
2answers
1k views

Linux kernel with grsec + Java / Apache Tomcat

I've got a Debian Linux 64 bit dedicated server. The kernel has the grsec patch applied. I'm mainly using this server to run Apache Tomcat (6.0.26, Java 6) and everything seems fine. The only issue, ...