TeamSpeak Server and GrSecurity Kernel

[EvilHyperion]

Hi all,

i've installed TeamSpeak on my Gentoo server running the latest GrSecurity Kernel 2.4.27 with GrSec 2.0.1. As already posted in another thread (Teamspeak on Debian Woody with GRSecurity --> http://forum.goteamspeak.com/showthread.php?t=2948) it is not possible to easily start TeamSpeak server. It exits with "Killed". Not more.

In the other thread there is also a solution posted, but like tritan already said this solution seems to be only for linux gurus.

However, my intention was to open a new thread, so that someone who had the same problem like me perhaps could explain me what i've to do.

Details: The system i have is a complete fresh install. There is no folder like /etc/grsec oder something else, no configuration for grsecurity has been made, but it is compiled into the kernel.


Thanks, EvilHyperion.

[alsh]

Hey. I responded in the other mentioned thread but i'll put the same links in here just in case you don't check the other one.

Check out
http://www.gentoo.org/proj/en/hardened/grsecurity.xml
http://www.gentoo.org/proj/en/hardened/grsecurity2.xml
and

http://forums.grsecurity.net/

Bad news is you pretty much got to learn how to properly set up grsecurity (then the "guru" poster in the other thread makes sense as it is just an entry to the acl table) which requires some reading and time. The other easier option is just to disable grsecurity in the kernel or use a different kernel. As I mentioned in the other thread what is the point of having it yet not properly setting it up?

If you need any assistance in the setup feel free to ask and i'll try to help you out, the gentoo docs are pretty damn good though.

I thought about it a bit too and since there are at least 3 people or so this effects would you like me to write up a guide? It may take me a bit but i'll do it if the demand is there.

[EvilHyperion]

I'll look over the guides you gave me and see how much I understand.
I will definitly answer to you whether I did it or not...

The offer to write a guide for setting up grsecurity is amazing. Not only me, but also others persons, I thing, have the same problem with that kerneloption.

So it would be nice, if you write the guide! Until then, I try it on my own. It doesn't matter who long it will take...

Thanks in advance.

[alsh]

I plan to start working on it shortly. I'll keep you posted.

[guldi]

It may be interesting to have a guide to do so, but so far I completly agree with you that grsec is a very kernel specific feature which should only be used by those who really know what they do (what's the benefit if you can't configure properly) ?
I don't think this should be discussed here to much in detail as it has in my opinion not much to do with TS. "We" already have a hard time to argume why not every router/modem configuration, available on the marked, is beeing discussed here :p


However, I'll go through your guide with great interest as soon as it's ready... gentoo rox ;)
I can only recommend Gentoo as it gives quite a good insight in some "lower" settings/workflows of Linux. Of course you need some time and the will do study lot's of guides, forums,...

[EvilHyperion]

Hi alsh,

since I last wrote to you I tried several times to set up the kernel with the guides you gave me. But I had no luck. It didn't start working like I would and so my last chance is your guide.

If you still feel like doing the guide it would be very nice.

Thanks.

[bodtx]

Hi, I have the same problem but on a RH 7.0.
I've looked around for GRSecurity but I didn't find it in my RH.

is it the same problem finally?