Page 1 of 1

NFS op ART kernel (ASL)

Posted: Mon May 05, 2008 12:05 pm
by Eijkb
Distro: CentOS 5 Final
Kernel: 2.6.24.2-2.art
Command: mount <IP>/backup /mnt/backup
Output: mount.nfs: No such device
Error log:

May 5 18:03:31 ns kernel: grsec: denied modification of module state by /sbin/modprobe[modprobe:15519] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[sh:15518] uid/euid:0/0 gid/egid:0/0
May 5 18:03:31 ns modprobe: FATAL: Error inserting sunrpc (/lib/modules/2.6.24.2-2.art/kernel/net/sunrpc/sunrpc.ko): Operation not permitted
May 5 18:03:31 ns modprobe: WARNING: Error running install command for sunrpc
May 5 18:03:31 ns kernel: grsec: denied modification of module state by /sbin/modprobe[modprobe:15517] uid/euid:0/0 gid/egid:0/0, parent /[khelper:15516] uid/euid:0/0 gid/egid:0/0
May 5 18:03:31 ns modprobe: WARNING: Error inserting nfs_acl (/lib/modules/2.6.24.2-2.art/kernel/fs/nfs_common/nfs_acl.ko): Operation not permitted
May 5 18:03:31 ns kernel: grsec: denied modification of module state by /sbin/modprobe[modprobe:15517] uid/euid:0/0 gid/egid:0/0, parent /[khelper:15516] uid/euid:0/0 gid/egid:0/0
May 5 18:03:31 ns modprobe: WARNING: Error inserting lockd (/lib/modules/2.6.24.2-2.art/kernel/fs/lockd/lockd.ko): Operation not permitted
May 5 18:03:31 ns kernel: grsec: denied modification of module state by /sbin/modprobe[modprobe:15517] uid/euid:0/0 gid/egid:0/0, parent /[khelper:15516] uid/euid:0/0 gid/egid:0/0
May 5 18:03:31 ns modprobe: FATAL: Error inserting nfs (/lib/modules/2.6.24.2-2.art/kernel/fs/nfs/nfs.ko): Operation not permitted

I know this is good (secure!) but how can I enable NFS, we use NFS to backup / restore. Is it possible to adapt the grsecurity conf files or something?

Posted: Mon May 05, 2008 5:16 pm
by scott
I believe all you need to do is set NFS to start at boot time, and reboot.

Posted: Mon May 05, 2008 10:27 pm
by Eijkb
You are right.