Re: [Devil-Linux-discuss] Bugreports for 1.2.12: GRSecurity and libipt_recent.so

[Heiko Z. <he...@zu...>]

On Sat, February 10, 2007 17:47, Vesselin Kostadinov wrote:
> 1. I noticed the following message on startup:
>
>
> Setting GRSecurity parameters: /etc/init.d/rc3.d/S22grsecurity: line
> 33: /proc/sys/kernel/grsecurity/rand_pids: No such file or directory
> /etc/init.d/rc3.d/S22grsecurity: line
> 33: /proc/sys/kernel/grsecurity/rand_tcp_src_ports: No such file or
> directory
>
>
> (these are 2 lines actually, the mail client breaks them)
>
>
> I cant see any real problem coming out of this though. I am not a
> GRSecurity
> expert by any means.

Don't worry about it, that's just cosmetic.
I will remove the error messages.

> 2. There seems to be missing library required by some netfilter modules:
>
>
> # modprobe ipt_recent    #loads OK!
> # iptables  -A SSH_CHECK -m recent --set --name SSH
> iptables v1.3.7: Couldn't load match
> `recent':/usr/lib/iptables/libipt_recent.so: cannot open shared object
> file:
> No such file or directory
>
>
> Try `iptables -h' or 'iptables --help' for more information.
>
>
>
>
> File /usr/lib/iptables/libipt_recent.so is missing indeed, however there
> are quite a few other netfilter libraries there.

Not sure why the libraries are missing (may be a bug in the latest
iptables). They exist in the build system, but never got copied onto the
media.
I will add some extra code to our build system to make sure all the libs
are being copied for the iptables extensions.

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org