Overslaan naar hoofdinhoud

Is ESET Security for Linux Server compatible with SELinux and grsecurity? - Kennisbank / Server Solutions - ESET Tech Center

Is ESET Security for Linux Server compatible with SELinux and grsecurity?

Lijst van auteurs

https://support.eset.com/kb880

ESET Security for Linux is not compatible with SELinux and grsecurity. 

If you have problems with SELinux and you do not need it, you can switch the system into permissive mode with the following commands:

echo 0 > /selinux/enforce
vi /etc/selinux/config

Set SELinux to "disabled" in configuration file.

SELINUX=disabled

 

For grsecurity, add a trusted group and add the user esets to the group.

# groupadd -g <GID> grsecgroup
# vi /etc/group
grsecgroup:x:123:esets #Example

Enable 'Trusted Path Execution (TPE)' and 'Invert GID option' within grsecurity.

# echo <GID> > /proc/sys/kernel/grsecurity/tpe_gid
# echo 1 > /proc/sys/kernel/grsecurity/tpe
# echo 1 > /proc/sys/kernel/grsecurity/grsec_lock

You can also do this the same way via sysctl command:

# sysctl kernel.grsecurity.tpe_gid = <GID> kernel.grsecurity.tpe = 1 kernel.grsecurity.grsec_lock = 1

To enable grsecurity permanently, edit the /etc/sysctl.conf and add the following lines:

kernel.grsecurity.tpe_gid = <GID>
kernel.grsecurity.tpe = 1
kernel.grsecurity.grsec_lock = 1

 

Reactie toevoegen

Log in of registreer om een reactie te plaatsen.

Heeft u een wachtwoordherinnering nodig?