New messages in log with hs-3.11.9-r1
"Tóth Attila" <[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
After bumping the kernel and gradm versions, I see these in the log: grsec: denied exec of usermode helper binary /lib64/rc/sh/cgroup-release-agent.sh located outside of /sbin The file is definitely located outside of /sbin. It belongs to openrc. What can be the best solution to handle this issue? Reloading policy knocks out the machine: https://forums.grsecurity.net/viewtopic.php?f=3&t=3881 -- dr Tóth Attila, Radiológus, 06-20-825-8057 Attila Toth MD, Radiologist, +36-20-825-8057