From: Gernot S. <ger...@tu...> - 2004-05-23 20:36:25
Attachments:
signature.asc
systrace
|
Hi folks, by runnning pnpdump in order to configure my old isa card I get the message > root@sunrpc:~ # pnpdump > Unable to get io permission for WRITE_DATA: Operation not permitted It seems to be a problem with the grsecurity patch, but I don't set any additional restictions. Has somebody an idea, what it could be. I attached an strace of the pnpdump to this email. Thanks, Gernot |
From: Heiko Z. <he...@zu...> - 2004-05-25 23:51:21
|
Gernot Stocker wrote: > Hi folks, > by runnning pnpdump in order to configure my old isa card I get the > message > >> root@sunrpc:~ # pnpdump >> Unable to get io permission for WRITE_DATA: Operation not permitted > > > It seems to be a problem with the grsecurity patch, but I don't set any > additional restictions. > > Has somebody an idea, what it could be. I attached an strace of the > pnpdump to this email. Looks like your only solution will be to compile your own DL release without grsecurity. Heiko |
From: Bruce S. <bw...@ar...> - 2004-05-26 12:56:35
|
> > by runnning pnpdump in order to configure my old isa card I get the > > message > > > >> root@sunrpc:~ # pnpdump > >> Unable to get io permission for WRITE_DATA: Operation not permitted > > > > > > It seems to be a problem with the grsecurity patch, but I don't set any > > additional restictions. > > > > Has somebody an idea, what it could be. I attached an strace of the > > pnpdump to this email. > > Looks like your only solution will be to compile your own DL release > without grsecurity. Personally I hate grsecurity and would like to see it removed from DL, especially DL running as a server. Does it really gain much over PAX? - BS |
From: Heiko Z. <he...@zu...> - 2004-05-26 13:26:26
|
>> > by runnning pnpdump in order to configure my old isa card I get the >> > message >> > >> >> root@sunrpc:~ # pnpdump >> >> Unable to get io permission for WRITE_DATA: Operation not permitted >> > >> > >> > It seems to be a problem with the grsecurity patch, but I don't set >> any >> > additional restictions. >> > >> > Has somebody an idea, what it could be. I attached an strace of the >> > pnpdump to this email. >> >> Looks like your only solution will be to compile your own DL release >> without grsecurity. > > Personally I hate grsecurity and would like to see it removed from DL, > especially DL running as a server. Does it really gain much over PAX? Yes it does add a lot of security. As discussed earlier, I don't have a problem if you create a server profile, you just have to maintain it. -- Regards Heiko Zuerker http://www.devil-linux.org |
From: Bruce S. <bw...@ar...> - 2004-05-26 13:52:43
|
> > Personally I hate grsecurity and would like to see it removed from DL, > > especially DL running as a server. Does it really gain much over PAX? > > Yes it does add a lot of security. How's it compare to SELinux? > As discussed earlier, I don't have a problem if you create a server > profile, I plan on it. Just haven't gotten around to it yet ... > you just have to maintain it. That's easy. Remove grsecurity, add PAX. I do it all the time! :-) - BS |
From: Heiko Z. <he...@zu...> - 2004-05-26 14:21:19
|
>> > Personally I hate grsecurity and would like to see it removed from DL, >> > especially DL running as a server. Does it really gain much over PAX? >> >> Yes it does add a lot of security. > > How's it compare to SELinux? http://www.grsecurity.net/features.php http://www.grsecurity.net/lsm.php >> As discussed earlier, I don't have a problem if you create a server >> profile, > > I plan on it. Just haven't gotten around to it yet ... > >> you just have to maintain it. > > That's easy. Remove grsecurity, add PAX. I do it all the time! :-) -- Regards Heiko Zuerker http://www.devil-linux.org |