gradm grsecurity incompatibility errors

I am just getting started on using PaX + grsecurity and am
trying to get
the gradm learning mode set up and running.

The first thing I ran into is a problem with setting up the
admin role
passwd.  I believe I figured that out with forum topic:
http://forums.gentoo.org/viewtopic-t-323359-high
light-gradm.html

The problem I am running into now is I get the following
error whenever
I try to use gradm to do anything (gradm -E, gradm -a, gradm
-D, etc):

gradm -E
You are using incompatible versions of gradm and
grsecurity.
Please update both versions to the ones available on the
website.
Make sure your gradm has been compiled for the kernel you
are currently
running.

the kernel that I am using is 2.6.20-hardened-r2 and the
version of
gradm is: sys-apps/gradm-2.1.9.200602141850

I have recently re-emerged to make sure that gradm was
compiled against
the current kernel.

Is there any way to verify if roles are active, or to see
what role I am
currently using (if any)?  

-- 
David Rock
davidgraniteweb.com
-- 
gentoo-hardenedgentoo.org mailing list

On Thu, 2007-05-10 at 14:11 -0500, David Rock wrote:
> I am just getting started on using PaX + grsecurity and
am trying to get
> the gradm learning mode set up and running.
> 
> The first thing I ran into is a problem with setting up
the admin role
> passwd.  I believe I figured that out with forum
topic:
> http://forums.gentoo.org/viewtopic-t-323359-high
light-gradm.html
> 
> The problem I am running into now is I get the
following error whenever
> I try to use gradm to do anything (gradm -E, gradm -a,
gradm -D, etc):
> 
> gradm -E
> You are using incompatible versions of gradm and
grsecurity.
> Please update both versions to the ones available on
the website.
> Make sure your gradm has been compiled for the kernel
you are currently
> running.
> 
> the kernel that I am using is 2.6.20-hardened-r2 and
the version of
> gradm is: sys-apps/gradm-2.1.9.200602141850
> 
> I have recently re-emerged to make sure that gradm was
compiled against
> the current kernel.

Use the ~arch version. (2.1.10.*)



> Is there any way to verify if roles are active, or to
see what role I am
> currently using (if any)?  
> 
> -- 
> David Rock
> davidgraniteweb.com

-- 
gentoo-hardenedgentoo.org mailing list

I've run into this same issue a couple of times.  Since I
didn't want to 
spend too much time fixing it, I just use the vanilla
sources from 
kernel.org and patch them against grsecurity.  Each release
of grsec is 
dependent on specific kernels, though, so you'd want to
check 
www.grsecurity.net first.

-brant


On Thu, 10 May 2007, David Rock wrote:

> I am just getting started on using PaX + grsecurity and
am trying to get
> the gradm learning mode set up and running.
> 
> The first thing I ran into is a problem with setting up
the admin role
> passwd.  I believe I figured that out with forum
topic:
> http://forums.gentoo.org/viewtopic-t-323359-high
light-gradm.html
> 
> The problem I am running into now is I get the
following error whenever
> I try to use gradm to do anything (gradm -E, gradm -a,
gradm -D, etc):
> 
> gradm -E
> You are using incompatible versions of gradm and
grsecurity.
> Please update both versions to the ones available on
the website.
> Make sure your gradm has been compiled for the kernel
you are currently
> running.
> 
> the kernel that I am using is 2.6.20-hardened-r2 and
the version of
> gradm is: sys-apps/gradm-2.1.9.200602141850
> 
> I have recently re-emerged to make sure that gradm was
compiled against
> the current kernel.
> 
> Is there any way to verify if roles are active, or to
see what role I am
> currently using (if any)?  
> 
> -- 
> David Rock
> davidgraniteweb.com
> -- 
> gentoo-hardenedgentoo.org mailing list
> 
> 
-- 
gentoo-hardenedgentoo.org mailing list

* Ned Ludd <solargentoo.org> [2007-05-10 12:19]:
> On Thu, 2007-05-10 at 14:11 -0500, David Rock wrote:
> > 
> > I have recently re-emerged to make sure that gradm
was compiled against
> > the current kernel.
> 
> Use the ~arch version. (2.1.10.*)

Looks like that did it, thanks!

-- 
David Rock
davidgraniteweb.com
-- 
gentoo-hardenedgentoo.org mailing list