<html> <head> <base href="https://bugs.freedesktop.org/" /> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW --- - CONFIG_GRKERNSEC_PROC prevents systemd's active users to have enough permission" href="https://bugs.freedesktop.org/show_bug.cgi?id=65575#c7">Comment # 7</a> on <a class="bz_bug_link bz_status_NEW " title="NEW --- - CONFIG_GRKERNSEC_PROC prevents systemd's active users to have enough permission" href="https://bugs.freedesktop.org/show_bug.cgi?id=65575">bug 65575</a> from <a class="email" href="mailto:ago@gentoo.org" title="Agostino Sarubbo <ago@gentoo.org>"> Agostino Sarubbo</a> <pre>(In reply to <a href="show_bug.cgi?id=65575#c6">comment #6</a>) > Could you be a bit more explicit? What is CONFIG_GRKERNSEC_PROC doing and > why is breaking systemd? Sure. You can find the info about grsecurity here <a href="http://grsecurity.net/">http://grsecurity.net/</a> The explanation of the module is: If you say Y here, the permissions of the /proc filesystem will be altered to enhance system security and privacy. You MUST choose either a user only restriction or a user and group restriction. Depending upon the option you choose, you can either restrict users to see only the processes they themselves run, or choose a group that can view all processes and files normally restricted to root if you choose the "restrict to user only" option. NOTE: If you're running identd or ntpd as a non-root user, you will have to run it as the group you specify here.</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the QA Contact for the bug.</li> <li>You are the assignee for the bug.</li> </ul> </body> </html>