411 REFERENCE · Wikibooks
Grsecurity/Troubleshooting
Reference material by Wikibooks contributors. This retains its source identity and is not 411 news reporting.
Grsecurity Troubleshooting Runtime Configuration The RBAC System
__TOC__
This page lists problems that might arise during deployment and usage of grsecurity.
Policies generated by the Full System Learning mode are lumped under role default, subject /
The -F switch for gradm is important, without it the log is assumed to be a process or role-based learning log and results in a single role or single subject policy being generated. The correct invocation after a Full System Learning phase is:
# gradm -F -L /etc/grsec/learning.logs -O /etc/grsec/policy
The RBAC System Runtime Configuration