kaiowas at gentoo
May 23, 2005, 1:51 AM
Post #2 of 2
(72 views)
Permalink
|
Hi
kakou wrote:
> Hello,
>
> I have this error when I try to authenticate (when I send a mail) :
>
> grsec: From 10.0.0.10: denied untrusted exec of
> /var/vpopmail/bin/vchkpw by
> /var/qmail/bin/qmail-smtpd[qmail-smtpd:17267] uid/euid:201/201
> gid/egid:200/200, parent /var/qmail/bin/qmail-smtpd[qmail-smtpd:18606]
> uid/euid:201/201 gid/egid:200/200
>
> How authorize /var/qmail/bin/qmail-smtpd to execute
> /var/vpopmail/bin/vchkpw ?
read the TPE-related config comments from the kernel sources
____
CONFIG_GRKERNSEC_TPE_ALL:
If you say Y here, All non-root users other than the ones in the group specified in the main TPE option will only be allowed to execute files in directories they own that are not group or world-writable, or in directories owned by root and writable only by root. If the sysctl option is enabled, a sysctl option with name "tpe_restrict_all" is created
____
bye,
peter
--
petre rodan
<kaiowas [at] gentoo>
Developer,
Hardened Gentoo Linux
|
signature.asc
