Running CDP agent (Idera R1soft) with ASL hardened kernel

If you have found this post you are probably using Atomic Secure Linux / ASL or PaX / grsec hardened kernel with idera r1soft backup agent and encountered an error like this:

Global Agent Exception (std::exception): boost::thread_resource_error or grsec: denied resource overstep by requesting … when trying to enable the cdp-agent service. The issue lies with the memory protection found in grsec security enhanced kernel. To overcome this you need to disable the protection for the CDP Binary. To do this first run:

/sbin/paxctl -c /usr/sbin/r1soft/bin/2-6/cdp-2-6

and /or

/sbin/paxctl -c /usr/sbin/r1soft/bin/cdp

to convert  PT_GNU_STACK header to PT_PAX_FLAGS and then:

/sbin/paxctl -m /usr/sbin/r1soft/bin/2-6/cdp-2-6

and /or

/sbin/paxctl -m /usr/sbin/r1soft/bin/cdp

If you are having trouble finding cdp binary, you can easily locate it by taking a look at the service init script located at /etc/init.d/cdp-agent. Remember to restart the service:

service cdp-agent restart

Everything should work as expected now. Enjoy

Print Friendly, PDF & Email

You may also like...