Bugzilla Bug 60056

I am using grsecurity with kernel 2.6.7. I am using gradm 2.0.1.

I am reading the quick start guide found at http://www.grsecurity.net/quickstart.pdf . On the second to last page, it says to turn on learning mode to do the following:

gradm -F -L /etc/grsec/learning.log

Though I get this back:

Error opening: /etc/grsec/pw
open: No such file or directory

grlearn is indeed running:

root     13774  0.0  3.6 13920 13920 pts/8   S<   10:17   0:00 /sbin/grlearn /etc/grsec/learning.log

However that log is zero bytes, and has the same date and timestamp as when I ran the command. I let this run many hours yesterday and used my system, and that never changed.

Am I missing something here? Is the guide wrong?


Portage 2.0.50-r1 (default-x86-1.4, gcc-3.2.3, glibc-2.3.2-r1, 2.6.7-grsec)
=================================================================
System uname: 2.6.7-grsec i686 Pentium III (Katmai)
Gentoo Base System version 1.4.3.8p1
distcc 2.16 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
ccache version 2.3 [enabled]
Autoconf: sys-devel/autoconf-2.59
Automake: sys-devel/automake-1.8.5
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CFLAGS="-mcpu=pentium3 -O2 -pipe -fomit-frame-pointer -mmmx -msse -mfpmath=sse,387"
CHOST="i686-pc-linux-gnu"
COMPILER="gcc3"
CONFIG_PROTECT="/etc /usr/X11R6/lib/X11/xkb /usr/kde/2/share/config /usr/kde/3.2/share/config /usr/kde/3/share/config /usr/lib/mozilla/defaults/pref /usr/share/config /var/bind /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-mcpu=pentium3 -O2 -pipe -fomit-frame-pointer -mmmx -msse -mfpmath=sse,387"
DISTDIR="/var/portage/distfiles"
FEATURES="autoaddcvs buildpkg ccache notitles sandbox"
GENTOO_MIRRORS="ftp://gentoo.mirrors.pair.com/ http://mirror.datapipe.net/gentoo http://open-systems.ufl.edu/mirrors/gentoo ftp://gentoo.netnitco.net/pub/mirrors/gentoo/source/ ftp://gentoo.ccccom.com"
MAKEOPTS="-j3"
PKGDIR="/var/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/var/portage"
PORTDIR_OVERLAY=""
SYNC="rsync://rsync.namerica.gentoo.org/gentoo-portage"
USE="X apache2 apm avi berkdb cdr chroot crypt cups encode esd foomaticdb gdbm gif gnome gpm gtk gtk2 imlib java jpeg kde kerberos ldap libg++ libwww mad mikmod mmx motif mozilla mpeg mysql ncurses nls oggvorbis opengl oss pam pdflib perl png python qt quicktime readline sdl slang snmp spell sse ssl svga tcpd tiff truetype x86 xml2 xmms xv zlib"

Well. Maybe grsec's docs are a bit out of date, I first had to set a password,
with gradm -P .

Maybe a note at the end of the ebuild could be added.

Added note in ~arch gradm-2.0.1-r1.ebuild thanks for reporting this.