Page 1 of 1

ASL kernel: not detected

Posted: Fri Nov 14, 2008 9:03 pm
by timgdixon
I just finished (I believe) installing ASL and I am wondering why I would be getting this notice? I'm new to this ASL world and would appreciate your help.

Checking Kernel security settings
ASL kernel: not detected [CRITICAL]

Best wishes,

TGD

Re: ASL kernel: not detected

Posted: Fri Nov 14, 2008 9:49 pm
by timgdixon
timgdixon wrote:I just finished (I believe) installing ASL and I am wondering why I would be getting this notice? I'm new to this ASL world and would appreciate your help.

Checking Kernel security settings
ASL kernel: not detected [CRITICAL]

Best wishes,

TGD
I may have solved this- i was just searching in the wrong place for the answer. I think all I needed to do was 'yum upgrade'.

Posted: Fri Nov 14, 2008 10:09 pm
by timgdixon
Well 'yum upgrade' didn't take away the "ASL kernel: not detected [CRITICAL]" message.

It appears to be running:
# rpm -q kernel
kernel-2.6.11-1.1369_FC4
kernel-2.6.25.4-4.art

So could this just be a glitch? Admittedly this is very new to me and I am trying to read everything I can.

Posted: Sat Nov 15, 2008 3:40 am
by Kalimari
Have you rebooted into new kernel? You may need to check asl configuration:

Code: Select all

asl -c
Scan and fix the installation:

Code: Select all

asl -s -f
If you still have problms, check to see which kernel is running and list all kernels on your system:

Code: Select all

uname -a
rpm -q kernel
If the latest art kernel is not listed, post results here for more help or search these forums.

Posted: Sat Nov 15, 2008 9:29 am
by timgdixon
Thank you for the reply. I ran the commands you gace and the ASL Kernel is now detected and OK and below is the response to show the kernel's. I assume the second one is the correct ASL.

asl -s -f

Checking Kernel security settings
ASL kernel: detected [OK]
Runtime module loading: disabled [OK]
GRsecurity administrative password: not set [INFO]
GRsecurity ACL database: not found [INFO]


# rpm -q kernel
kernel-2.6.11-1.1369_FC4
kernel-2.6.25.4-4.art

Is it normal to have long lists of checksum changes being Mailed?

Posted: Sat Nov 15, 2008 1:43 pm
by scott
It depends on what it is changing, the idea is that you should check them out to make sure it is legitimate. RPM updates can do it though, check your /var/log/yum.log and use rpm -qf <path to file> to see if they line up with an update.