Skip to content

If grsecurity is enabled start of the device-manager service fails #7

@sani-rus

Description

@sani-rus

First few basic facts. Grsecurity has nothing to do with the IMA, or wr-ima-appraise layer. It is different functionality, part of the wr-idp-devkit layer.

Different versions of the IDP XT have different default settings for the grsecurity. Either it can be enabled or disabled by default. For the version that I use, grsecurity is enabled by default, if not explicitly disabled during platform project configuration.

If grsecurity is enabled, starting of the device-manager fails. I needed to add
kernel.grsecurity.tpe=0
kernel.grsecurity.tpe_gid=0
kernel.grsecurity.tpe_restrict_all=0

into the /etc/sysctl.conf

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions