zabbix agent and grsecurity

[Clansman]

Hi everyone,

Is there anyone that runs the zabbix agent over a grsecurity Linux kernel?

I'm thinking in writing a very simple policy to give the zabbix user access to /proc/net... let's hope I do it well

[]

[Clansman]

I've hacked my way through the issue... but I don't like it much...

The grsecurity configuration allows an exception group for the /proc restrictions. Just added the zabbix group and voilá!

However I'd prefer to write a simple policy to do the same not for the whole /proc but for the relevant files only...

[]