I think Jacques mentioned this recently as below ----- Original Message ----- From: "Jacques Nilo" <[EMAIL PROTECTED]> To: "Ivan Arsenault" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Tuesday, December 17, 2002 1:40 PM Subject: [leaf-user] /dev/kmem error with kernel 2.4.20 on Bering
> CONFIG_GRKERNSEC_KMEM enabled. > The grsecurity doc states: > "If you say Y here, /dev/kmem won't be allowed to be opened. > This keeps it from being read from or written to via both mmap and > ioctl. If you have module support disabled, enabling this feature > in addition to the /dev/mem feature will close up the three ways that > are currently used (/dev/mem being the least used) to insert malicious > code into the running kernel. Even with all these features enabled, > we still highly recommend that you use the ACL system. > The only common application that is known to open /dev/kmem is klogd, > however it only uses it for runtime symbol resolution for kernel logs and > is not necessary for correct operation of the application. > It is therefore recommended that you say Y here." > This is why you have this Error opening /dev/kmem message which should not > hurt > Jacques ----- Original Message ----- From: "jim mcdonagh" <[EMAIL PROTECTED]> To: "Jacques Nilo" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Wednesday, December 18, 2002 3:20 PM Subject: [leaf-user] Re: [leaf-devel] Bering 1.0-stable: kernel 2.4.20 available ! Jacques, I created a bootable cdrom using Beriing v1.0 and kernel 2.4.20, but when it boots there is a problem with the system log daemon and grsec. after starting the syslogd the message reads... "grsec: attempted open of /dev/kmem by (kogd:........" is that an error that is expected? regards, -jim On Sunday 15 December 2002 04:41 pm, Jacques Nilo wrote: > The full story is here: > http://leaf.sourceforge.net/article.php?sid=65 > > Jacques > > > ------------------------------------------------------- > This sf.net email is sponsored by: > With Great Power, Comes Great Responsibility > Learn to use your power at OSDN's High Performance Computing Channel > http://hpc.devchannel.org/ > > _______________________________________________ > leaf-devel mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-devel > > _____________________________________________________________________ > This inbound message has been scanned for all viruses by the MessageLabs > SkyScan AV service. For more information on a higher level of virus > protection please visit http://www.mcdonagh.com/networks/messagelabs.asp. _____________________________________________________________________ This outbound message has been scanned for all viruses by the MessageLabs SkyScan AV service. For more information on a higher level of virus protection please visit http://www.mcdonagh.com/networks/messagelabs.asp. ------------------------------------------------------- This SF.NET email is sponsored by: Order your Holiday Geek Presents Now! Green Lasers, Hip Geek T-Shirts, Remote Control Tanks, Caffeinated Soap, MP3 Players, XBox Games, Flying Saucers, WebCams, Smart Putty. T H I N K G E E K . C O M http://www.thinkgeek.com/sf/ ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html ------------------------------------------------------- This SF.NET email is sponsored by: Order your Holiday Geek Presents Now! Green Lasers, Hip Geek T-Shirts, Remote Control Tanks, Caffeinated Soap, MP3 Players, XBox Games, Flying Saucers, WebCams, Smart Putty. T H I N K G E E K . C O M http://www.thinkgeek.com/sf/ ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
