You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
First few basic facts. Grsecurity has nothing to do with the IMA, or wr-ima-appraise layer. It is different functionality, part of the wr-idp-devkit layer.
Different versions of the IDP XT have different default settings for the grsecurity. Either it can be enabled or disabled by default. For the version that I use, grsecurity is enabled by default, if not explicitly disabled during platform project configuration.
If grsecurity is enabled, starting of the device-manager fails. I needed to add
kernel.grsecurity.tpe=0
kernel.grsecurity.tpe_gid=0
kernel.grsecurity.tpe_restrict_all=0
into the /etc/sysctl.conf
The text was updated successfully, but these errors were encountered:
First few basic facts. Grsecurity has nothing to do with the IMA, or wr-ima-appraise layer. It is different functionality, part of the wr-idp-devkit layer.
Different versions of the IDP XT have different default settings for the grsecurity. Either it can be enabled or disabled by default. For the version that I use, grsecurity is enabled by default, if not explicitly disabled during platform project configuration.
If grsecurity is enabled, starting of the device-manager fails. I needed to add
kernel.grsecurity.tpe=0
kernel.grsecurity.tpe_gid=0
kernel.grsecurity.tpe_restrict_all=0
into the /etc/sysctl.conf
The text was updated successfully, but these errors were encountered: