debian and grsecurity

Here you can discuss every aspect of Debian. Note: not for support requests!

debian and grsecurity

Postby cipheryouth » 2016-08-15 03:27

OS : Debian

kernel : 3.14.63-grsec

I have a redis docker containe.

After the "Full system learn", gradm -E, some warnings came up.

Code: Select all
warning: denied access to /proc/1/stat by /usr/local/bin/redis-server, parent /usr/bin/docker-containered-shim


So how can I fix it.

Thanks a lot.
cipheryouth
 
Posts: 2
Joined: 2016-08-15 03:21

Re: debian and grsecurity

Postby GarryRicketson » 2016-08-15 03:38

Forum guidelines. Please read before first post!
Before you start using Debian User Forums, please observe the following guidelines:

Do not cross post. Posting the same topic in more than one category only creates confusion and makes it hard to keep track on the various replies. Double posts will be locked.
Last edited by GarryRicketson on 2016-08-15 13:59, edited 1 time in total.
User avatar
GarryRicketson
 
Posts: 5163
Joined: 2015-01-20 22:16
Location: Durango, Mexico

Re: debian and grsecurity

Postby cipheryouth » 2016-08-15 03:40

And my policy is follow:

Code: Select all
subject /usr/local/bin/redis-server o {
     ...
     /proc/1/stat     r
     ...
}
cipheryouth
 
Posts: 2
Joined: 2016-08-15 03:21


Return to General Discussion

Who is online

Users browsing this forum: No registered users and 3 guests

fashionable