grsecurity forums

Hello i had a problem using the latest grsecurity test patch, it seems like the kernel crashed for some reasons and the whole system was out of memory ( I have 4 giga of ram and never saw more than 500 megs used yet )
I did not have the chance to investigate anything but since it's an fully firewalled machine and is working on this configuration for years ( kernel was the only thing changed ) I must blame the kernel.
im only asking some people around here maybe you had this problem before to someone else and it's something im doing wrong...
And btw: when will we see a stable version ?

btnet wrote:Hello i had a problem using the latest grsecurity test patch

would that be 2.6.23.14-200801231800?

it seems like the kernel crashed for some reasons and the whole system was out of memory ( I have 4 giga of ram and never saw more than 500 megs used yet )

hmm, that would be some kind of memory leak i guess, taking regular snapshots of /proc/slabinfo and /proc/meminfo may help in pinpointing which kind of memory is leaking. also send us your .config please.

And btw: when will we see a stable version ?

i don't know yet, i have some bugs to reproduce/analyze/fix myself, but if i don't get feedback on them, i might as well call 2.6.24 'stable', but that will never mean the same stability as the 2.4 series.

If you use kernel >=2.6.22(i think it was) and <2.6.24 your problem might be related to this thread(not a grsec problem):
http://groups.google.se/group/fa.linux.kernel/browse_frm/thread/bfb1ebb25bda2d3a/0da07b5bb35a780e?hl=sv&lnk=gst&q=2.6.22-stable+causes+oomkiller+to+be+invoked.
My post is the last one(by date) and implementing the patch into my 2.6.22.9 kernel fixed my problem (mysterious oom on machines with >=4Gb ram) and the patch is in 2.6.24 so im just waiting for a grsec release now

thank you for your fast response, below are the required files and info


the patch and kernel I used is: grsecurity-2.1.11-2.6.23.14-200801231800.patch

/proc/slabinfo:

slabinfo - version: 2.1
# name <active_objs> <num_objs> <objsize> <objperslab> <pagesperslab> : tunables <limit> <batchcount> <sharedfactor> : slabdata <active_slabs> <num_slabs> <sharedavail>
jbd_4k 4 6 4096 1 1 : tunables 24 12 8 : slabdata 4 6 0
UNIX 39 54 448 9 1 : tunables 54 27 8 : slabdata 6 6 0
nf_conntrack_expect 0 0 124 31 1 : tunables 120 60 8 : slabdata 0 0 0
nf_conntrack 49 126 212 18 1 : tunables 120 60 8 : slabdata 7 7 0
scsi_cmd_cache 34 36 320 12 1 : tunables 54 27 8 : slabdata 3 3 0
cfq_io_context 75 132 88 44 1 : tunables 120 60 8 : slabdata 3 3 0
cfq_queue 74 92 84 46 1 : tunables 120 60 8 : slabdata 2 2 0
isofs_inode_cache 0 0 352 11 1 : tunables 54 27 8 : slabdata 0 0 0
hugetlbfs_inode_cache 1 12 324 12 1 : tunables 54 27 8 : slabdata 1 1 0
ext2_inode_cache 0 0 460 8 1 : tunables 54 27 8 : slabdata 0 0 0
ext2_xattr 0 0 48 78 1 : tunables 120 60 8 : slabdata 0 0 0
journal_handle 16 169 20 169 1 : tunables 120 60 8 : slabdata 1 1 0
journal_head 164 576 52 72 1 : tunables 120 60 8 : slabdata 8 8 0
revoke_table 6 254 12 254 1 : tunables 120 60 8 : slabdata 1 1 0
revoke_record 0 0 16 203 1 : tunables 120 60 8 : slabdata 0 0 0
ext3_inode_cache 5206 5208 476 8 1 : tunables 54 27 8 : slabdata 651 651 0
ext3_xattr 0 0 48 78 1 : tunables 120 60 8 : slabdata 0 0 0
dnotify_cache 0 0 20 169 1 : tunables 120 60 8 : slabdata 0 0 0
inotify_event_cache 0 0 28 127 1 : tunables 120 60 8 : slabdata 0 0 0
inotify_watch_cache 0 0 40 92 1 : tunables 120 60 8 : slabdata 0 0 0
kioctx 0 0 192 20 1 : tunables 120 60 8 : slabdata 0 0 0
kiocb 0 0 192 20 1 : tunables 120 60 8 : slabdata 0 0 0
fasync_cache 0 0 16 203 1 : tunables 120 60 8 : slabdata 0 0 0
shmem_inode_cache 725 738 420 9 1 : tunables 54 27 8 : slabdata 82 82 0
nsproxy 0 0 28 127 1 : tunables 120 60 8 : slabdata 0 0 0
posix_timers_cache 0 0 92 42 1 : tunables 120 60 8 : slabdata 0 0 0
uid_cache 9 59 64 59 1 : tunables 120 60 8 : slabdata 1 1 0
UDP-Lite 0 0 512 7 1 : tunables 54 27 8 : slabdata 0 0 0
tcp_bind_bucket 10 203 16 203 1 : tunables 120 60 8 : slabdata 1 1 0
inet_peer_cache 13 59 64 59 1 : tunables 120 60 8 : slabdata 1 1 0
ip_fib_alias 15 113 32 113 1 : tunables 120 60 8 : slabdata 1 1 0
ip_fib_hash 15 113 32 113 1 : tunables 120 60 8 : slabdata 1 1 0
ip_dst_cache 89 180 256 15 1 : tunables 120 60 8 : slabdata 12 12 0
arp_cache 3 20 192 20 1 : tunables 120 60 8 : slabdata 1 1 0
RAW 3 7 512 7 1 : tunables 54 27 8 : slabdata 1 1 0
UDP 3 14 512 7 1 : tunables 54 27 8 : slabdata 2 2 0
tw_sock_TCP 0 0 128 30 1 : tunables 120 60 8 : slabdata 0 0 0
request_sock_TCP 16 59 64 59 1 : tunables 120 60 8 : slabdata 1 1 0
TCP 23 28 1152 7 2 : tunables 24 12 8 : slabdata 4 4 0
eventpoll_pwq 93 202 36 101 1 : tunables 120 60 8 : slabdata 2 2 0
eventpoll_epi 93 150 128 30 1 : tunables 120 60 8 : slabdata 5 5 0
sgpool-128 2 3 2560 3 2 : tunables 24 12 8 : slabdata 1 1 0
sgpool-64 2 3 1280 3 1 : tunables 24 12 8 : slabdata 1 1 0
sgpool-32 2 6 640 6 1 : tunables 54 27 8 : slabdata 1 1 0
sgpool-16 12 12 320 12 1 : tunables 54 27 8 : slabdata 1 1 0
sgpool-8 20 20 192 20 1 : tunables 120 60 8 : slabdata 1 1 0
scsi_io_context 0 0 104 37 1 : tunables 120 60 8 : slabdata 0 0 0
blkdev_ioc 72 113 32 113 1 : tunables 120 60 8 : slabdata 1 1 0
blkdev_queue 22 24 956 4 1 : tunables 54 27 8 : slabdata 6 6 0
blkdev_requests 100 105 188 21 1 : tunables 120 60 8 : slabdata 5 5 0
biovec-256 2 2 3072 2 2 : tunables 24 12 8 : slabdata 1 1 0
biovec-128 2 5 1536 5 2 : tunables 24 12 8 : slabdata 1 1 0
biovec-64 2 5 768 5 1 : tunables 54 27 8 : slabdata 1 1 0
biovec-16 2 20 192 20 1 : tunables 120 60 8 : slabdata 1 1 0
biovec-4 2 59 64 59 1 : tunables 120 60 8 : slabdata 1 1 0
biovec-1 34 203 16 203 1 : tunables 120 60 8 : slabdata 1 1 0
bio 76 90 128 30 1 : tunables 120 60 8 : slabdata 3 3 0
sock_inode_cache 86 100 384 10 1 : tunables 54 27 8 : slabdata 10 10 0
skbuff_fclone_cache 52 80 384 10 1 : tunables 54 27 8 : slabdata 8 8 0
skbuff_head_cache 334 400 192 20 1 : tunables 120 60 8 : slabdata 20 20 0
file_lock_cache 19 40 96 40 1 : tunables 120 60 8 : slabdata 1 1 0
Acpi-Operand 782 828 40 92 1 : tunables 120 60 8 : slabdata 9 9 0
Acpi-ParseExt 0 0 44 84 1 : tunables 120 60 8 : slabdata 0 0 0
Acpi-Parse 0 0 28 127 1 : tunables 120 60 8 : slabdata 0 0 0
Acpi-State 0 0 44 84 1 : tunables 120 60 8 : slabdata 0 0 0
Acpi-Namespace 611 676 20 169 1 : tunables 120 60 8 : slabdata 4 4 0
proc_inode_cache 708 715 340 11 1 : tunables 54 27 8 : slabdata 65 65 0
sigqueue 74 108 144 27 1 : tunables 120 60 8 : slabdata 4 4 0
radix_tree_node 4854 5226 288 13 1 : tunables 54 27 8 : slabdata 402 402 0
bdev_cache 27 27 448 9 1 : tunables 54 27 8 : slabdata 3 3 0
sysfs_dir_cache 6343 6408 52 72 1 : tunables 120 60 8 : slabdata 89 89 0
mnt_cache 22 30 128 30 1 : tunables 120 60 8 : slabdata 1 1 0
inode_cache 4800 4800 324 12 1 : tunables 54 27 8 : slabdata 400 400 0
dentry 19060 19080 128 30 1 : tunables 120 60 8 : slabdata 636 636 0
filp 974 1500 192 20 1 : tunables 120 60 8 : slabdata 75 75 0
names_cache 3 3 4096 1 1 : tunables 24 12 8 : slabdata 3 3 0
idr_layer_cache 96 116 136 29 1 : tunables 120 60 8 : slabdata 4 4 0
buffer_head 10515 22847 56 67 1 : tunables 120 60 8 : slabdata 341 341 6
mm_struct 126 126 448 9 1 : tunables 54 27 8 : slabdata 14 14 0
vm_area_struct 6148 6804 92 42 1 : tunables 120 60 8 : slabdata 162 162 0
fs_cache 114 236 64 59 1 : tunables 120 60 8 : slabdata 4 4 0
files_cache 115 225 256 15 1 : tunables 120 60 8 : slabdata 15 15 0
signal_cache 155 160 384 10 1 : tunables 54 27 8 : slabdata 16 16 0
sighand_cache 138 138 1344 3 1 : tunables 24 12 8 : slabdata 46 46 0
task_struct 151 175 1376 5 2 : tunables 24 12 8 : slabdata 35 35 0
anon_vma 630 1016 12 254 1 : tunables 120 60 8 : slabdata 4 4 0
pmd 300 300 4096 1 1 : tunables 24 12 8 : slabdata 300 300 0
pid 158 404 36 101 1 : tunables 120 60 8 : slabdata 4 4 0
size-4194304(DMA) 0 0 4194304 1 1024 : tunables 1 1 0 : slabdata 0 0 0
size-4194304 0 0 4194304 1 1024 : tunables 1 1 0 : slabdata 0 0 0
size-2097152(DMA) 0 0 2097152 1 512 : tunables 1 1 0 : slabdata 0 0 0
size-2097152 0 0 2097152 1 512 : tunables 1 1 0 : slabdata 0 0 0
size-1048576(DMA) 0 0 1048576 1 256 : tunables 1 1 0 : slabdata 0 0 0
size-1048576 0 0 1048576 1 256 : tunables 1 1 0 : slabdata 0 0 0
size-524288(DMA) 0 0 524288 1 128 : tunables 1 1 0 : slabdata 0 0 0
size-524288 0 0 524288 1 128 : tunables 1 1 0 : slabdata 0 0 0
size-262144(DMA) 0 0 262144 1 64 : tunables 1 1 0 : slabdata 0 0 0
size-262144 0 0 262144 1 64 : tunables 1 1 0 : slabdata 0 0 0
size-131072(DMA) 0 0 131072 1 32 : tunables 8 4 0 : slabdata 0 0 0
size-131072 0 0 131072 1 32 : tunables 8 4 0 : slabdata 0 0 0
size-65536(DMA) 0 0 65536 1 16 : tunables 8 4 0 : slabdata 0 0 0
size-65536 0 0 65536 1 16 : tunables 8 4 0 : slabdata 0 0 0
size-32768(DMA) 0 0 32768 1 8 : tunables 8 4 0 : slabdata 0 0 0
size-32768 1 1 32768 1 8 : tunables 8 4 0 : slabdata 1 1 0
size-16384(DMA) 0 0 16384 1 4 : tunables 8 4 0 : slabdata 0 0 0
size-16384 5 12 16384 1 4 : tunables 8 4 0 : slabdata 5 12 0
size-8192(DMA) 0 0 8192 1 2 : tunables 8 4 0 : slabdata 0 0 0
size-8192 3 6 8192 1 2 : tunables 8 4 0 : slabdata 3 6 0
size-4096(DMA) 0 0 4096 1 1 : tunables 24 12 8 : slabdata 0 0 0
size-4096 19 19 4096 1 1 : tunables 24 12 8 : slabdata 19 19 0
size-2048(DMA) 0 0 2048 2 1 : tunables 24 12 8 : slabdata 0 0 0
size-2048 392 420 2048 2 1 : tunables 24 12 8 : slabdata 210 210 6
size-1024(DMA) 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0
size-1024 168 184 1024 4 1 : tunables 54 27 8 : slabdata 46 46 0
size-512(DMA) 0 0 512 8 1 : tunables 54 27 8 : slabdata 0 0 0
size-512 979 1032 512 8 1 : tunables 54 27 8 : slabdata 129 129 6
size-256(DMA) 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0
size-256 109 120 256 15 1 : tunables 120 60 8 : slabdata 8 8 0
size-192(DMA) 0 0 192 20 1 : tunables 120 60 8 : slabdata 0 0 0
size-192 112 120 192 20 1 : tunables 120 60 8 : slabdata 6 6 0
size-128(DMA) 0 0 128 30 1 : tunables 120 60 8 : slabdata 0 0 0
size-128 416 450 128 30 1 : tunables 120 60 8 : slabdata 15 15 0
size-64(DMA) 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0
size-32(DMA) 0 0 32 113 1 : tunables 120 60 8 : slabdata 0 0 0
size-64 1567 2301 64 59 1 : tunables 120 60 8 : slabdata 39 39 0
size-32 4029 4181 32 113 1 : tunables 120 60 8 : slabdata 37 37 0
kmem_cache 126 180 128 30 1 : tunables 120 60 8 : slabdata 6 6 0


and /proc/meminfo

MemTotal: 4149692 kB
MemFree: 3639752 kB
Buffers: 28228 kB
Cached: 255752 kB
SwapCached: 0 kB
Active: 339768 kB
Inactive: 137516 kB
HighTotal: 3273440 kB
HighFree: 2816476 kB
LowTotal: 876252 kB
LowFree: 823276 kB
SwapTotal: 2096472 kB
SwapFree: 2096472 kB
Dirty: 272 kB
Writeback: 0 kB
AnonPages: 193320 kB
Mapped: 24140 kB
Slab: 16596 kB
SReclaimable: 8444 kB
SUnreclaim: 8152 kB
PageTables: 5444 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
CommitLimit: 4171316 kB
Committed_AS: 1136504 kB
VmallocTotal: 118776 kB
VmallocUsed: 1336 kB
VmallocChunk: 117360 kB
HugePages_Total: 0
HugePages_Free: 0
HugePages_Rsvd: 0
Hugepagesize: 2048 kB


and the kernel .config ( with # lines removed )

CONFIG_X86_32=y
CONFIG_GENERIC_TIME=y
CONFIG_GENERIC_CMOS_UPDATE=y
CONFIG_CLOCKSOURCE_WATCHDOG=y
CONFIG_GENERIC_CLOCKEVENTS=y
CONFIG_GENERIC_CLOCKEVENTS_BROADCAST=y
CONFIG_LOCKDEP_SUPPORT=y
CONFIG_STACKTRACE_SUPPORT=y
CONFIG_SEMAPHORE_SLEEPERS=y
CONFIG_X86=y
CONFIG_MMU=y
CONFIG_ZONE_DMA=y
CONFIG_QUICKLIST=y
CONFIG_GENERIC_ISA_DMA=y
CONFIG_GENERIC_IOMAP=y
CONFIG_GENERIC_BUG=y
CONFIG_GENERIC_HWEIGHT=y
CONFIG_ARCH_MAY_HAVE_PC_FDC=y
CONFIG_DMI=y
CONFIG_DEFCONFIG_LIST="/lib/modules/$UNAME_RELEASE/.config"

CONFIG_EXPERIMENTAL=y
CONFIG_LOCK_KERNEL=y
CONFIG_INIT_ENV_ARG_LIMIT=32
CONFIG_LOCALVERSION=""
CONFIG_LOCALVERSION_AUTO=y
CONFIG_SWAP=y
CONFIG_SYSVIPC=y
CONFIG_SYSVIPC_SYSCTL=y
CONFIG_LOG_BUF_SHIFT=15
CONFIG_SYSFS_DEPRECATED=y
CONFIG_BLK_DEV_INITRD=y
CONFIG_INITRAMFS_SOURCE=""
CONFIG_CC_OPTIMIZE_FOR_SIZE=y
CONFIG_SYSCTL=y
CONFIG_UID16=y
CONFIG_SYSCTL_SYSCALL=y
CONFIG_HOTPLUG=y
CONFIG_PRINTK=y
CONFIG_BUG=y
CONFIG_ELF_CORE=y
CONFIG_BASE_FULL=y
CONFIG_FUTEX=y
CONFIG_ANON_INODES=y
CONFIG_EPOLL=y
CONFIG_SIGNALFD=y
CONFIG_EVENTFD=y
CONFIG_SHMEM=y
CONFIG_VM_EVENT_COUNTERS=y
CONFIG_SLAB=y
CONFIG_RT_MUTEXES=y
CONFIG_BASE_SMALL=0
CONFIG_MODULES=y
CONFIG_MODULE_UNLOAD=y
CONFIG_MODULE_FORCE_UNLOAD=y
CONFIG_MODVERSIONS=y
CONFIG_KMOD=y
CONFIG_STOP_MACHINE=y
CONFIG_BLOCK=y
CONFIG_LBD=y

CONFIG_IOSCHED_NOOP=y
CONFIG_IOSCHED_AS=y
CONFIG_IOSCHED_DEADLINE=y
CONFIG_IOSCHED_CFQ=y
CONFIG_DEFAULT_CFQ=y
CONFIG_DEFAULT_IOSCHED="cfq"

CONFIG_SMP=y
CONFIG_X86_PC=y
CONFIG_MCORE2=y
CONFIG_X86_CMPXCHG=y
CONFIG_X86_L1_CACHE_SHIFT=6
CONFIG_X86_XADD=y
CONFIG_RWSEM_XCHGADD_ALGORITHM=y
CONFIG_GENERIC_CALIBRATE_DELAY=y
CONFIG_X86_WP_WORKS_OK=y
CONFIG_X86_INVLPG=y
CONFIG_X86_BSWAP=y
CONFIG_X86_POPAD_OK=y
CONFIG_X86_GOOD_APIC=y
CONFIG_X86_INTEL_USERCOPY=y
CONFIG_X86_USE_PPRO_CHECKSUM=y
CONFIG_X86_TSC=y
CONFIG_X86_MINIMUM_CPU_FAMILY=4
CONFIG_NR_CPUS=2
CONFIG_SCHED_MC=y
CONFIG_PREEMPT_NONE=y
CONFIG_PREEMPT_BKL=y
CONFIG_X86_LOCAL_APIC=y
CONFIG_X86_IO_APIC=y
CONFIG_VM86=y

CONFIG_DMIID=y
CONFIG_HIGHMEM64G=y
CONFIG_PAGE_OFFSET=0xC0000000
CONFIG_HIGHMEM=y
CONFIG_X86_PAE=y
CONFIG_ARCH_FLATMEM_ENABLE=y
CONFIG_ARCH_SPARSEMEM_ENABLE=y
CONFIG_ARCH_SELECT_MEMORY_MODEL=y
CONFIG_ARCH_POPULATES_NODE_MAP=y
CONFIG_SELECT_MEMORY_MODEL=y
CONFIG_FLATMEM_MANUAL=y
CONFIG_FLATMEM=y
CONFIG_FLAT_NODE_MEM_MAP=y
CONFIG_SPARSEMEM_STATIC=y
CONFIG_SPLIT_PTLOCK_CPUS=4
CONFIG_RESOURCES_64BIT=y
CONFIG_ZONE_DMA_FLAG=1
CONFIG_BOUNCE=y
CONFIG_NR_QUICK=1
CONFIG_VIRT_TO_BUS=y
CONFIG_HIGHPTE=y
CONFIG_MTRR=y
CONFIG_SECCOMP=y
CONFIG_HZ_250=y
CONFIG_HZ=250
CONFIG_PHYSICAL_START=0x200000
CONFIG_PHYSICAL_ALIGN=0x100000
CONFIG_ARCH_ENABLE_MEMORY_HOTPLUG=y

CONFIG_PM=y
CONFIG_PM_LEGACY=y
CONFIG_SUSPEND_SMP_POSSIBLE=y
CONFIG_HIBERNATION_SMP_POSSIBLE=y
CONFIG_ACPI=y
CONFIG_ACPI_BUTTON=y
CONFIG_ACPI_FAN=y
CONFIG_ACPI_PROCESSOR=y
CONFIG_ACPI_THERMAL=y
CONFIG_ACPI_BLACKLIST_YEAR=2001
CONFIG_ACPI_EC=y
CONFIG_ACPI_POWER=y
CONFIG_ACPI_SYSTEM=y
CONFIG_X86_PM_TIMER=y


CONFIG_PCI=y
CONFIG_PCI_GOANY=y
CONFIG_PCI_BIOS=y
CONFIG_PCI_DIRECT=y
CONFIG_PCI_MMCONFIG=y
CONFIG_PCIEPORTBUS=y
CONFIG_PCIEAER=y
CONFIG_ARCH_SUPPORTS_MSI=y
CONFIG_PCI_MSI=y
CONFIG_HT_IRQ=y
CONFIG_ISA_DMA_API=y


CONFIG_BINFMT_ELF=y
CONFIG_BINFMT_MISC=y

CONFIG_NET=y

CONFIG_PACKET=y
CONFIG_PACKET_MMAP=y
CONFIG_UNIX=y
CONFIG_INET=y
CONFIG_IP_MULTICAST=y
CONFIG_IP_FIB_HASH=y
CONFIG_SYN_COOKIES=y
CONFIG_INET_DIAG=y
CONFIG_INET_TCP_DIAG=y
CONFIG_TCP_CONG_CUBIC=y
CONFIG_DEFAULT_TCP_CONG="cubic"
CONFIG_NETFILTER=y

CONFIG_NF_CONNTRACK_ENABLED=y
CONFIG_NF_CONNTRACK=y
CONFIG_NF_CT_ACCT=y
CONFIG_NF_CONNTRACK_MARK=y
CONFIG_NETFILTER_XTABLES=y
CONFIG_NETFILTER_XT_TARGET_CLASSIFY=y
CONFIG_NETFILTER_XT_TARGET_MARK=y
CONFIG_NETFILTER_XT_TARGET_NFQUEUE=y
CONFIG_NETFILTER_XT_TARGET_NFLOG=y
CONFIG_NETFILTER_XT_TARGET_TRACE=y
CONFIG_NETFILTER_XT_TARGET_TCPMSS=y
CONFIG_NETFILTER_XT_MATCH_COMMENT=y
CONFIG_NETFILTER_XT_MATCH_CONNBYTES=y
CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=y
CONFIG_NETFILTER_XT_MATCH_CONNMARK=y
CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
CONFIG_NETFILTER_XT_MATCH_ESP=y
CONFIG_NETFILTER_XT_MATCH_HELPER=y
CONFIG_NETFILTER_XT_MATCH_LENGTH=y
CONFIG_NETFILTER_XT_MATCH_LIMIT=y
CONFIG_NETFILTER_XT_MATCH_MARK=y
CONFIG_NETFILTER_XT_MATCH_MULTIPORT=y
CONFIG_NETFILTER_XT_MATCH_PKTTYPE=y
CONFIG_NETFILTER_XT_MATCH_QUOTA=y
CONFIG_NETFILTER_XT_MATCH_REALM=y
CONFIG_NETFILTER_XT_MATCH_STATE=y
CONFIG_NETFILTER_XT_MATCH_STATISTIC=y
CONFIG_NETFILTER_XT_MATCH_STRING=y
CONFIG_NETFILTER_XT_MATCH_TCPMSS=y

CONFIG_NF_CONNTRACK_IPV4=y
CONFIG_NF_CONNTRACK_PROC_COMPAT=y
CONFIG_IP_NF_IPTABLES=y
CONFIG_IP_NF_MATCH_IPRANGE=y
CONFIG_IP_NF_MATCH_TOS=y
CONFIG_IP_NF_MATCH_RECENT=y
CONFIG_IP_NF_MATCH_ECN=y
CONFIG_IP_NF_MATCH_AH=y
CONFIG_IP_NF_MATCH_TTL=y
CONFIG_IP_NF_MATCH_OWNER=y
CONFIG_IP_NF_MATCH_ADDRTYPE=y
CONFIG_IP_NF_MATCH_STEALTH=y
CONFIG_IP_NF_FILTER=y
CONFIG_IP_NF_TARGET_REJECT=y
CONFIG_IP_NF_TARGET_LOG=y
CONFIG_IP_NF_TARGET_ULOG=y
CONFIG_IP_NF_RAW=y

CONFIG_NET_CLS_ROUTE=y




CONFIG_STANDALONE=y
CONFIG_PNP=y

CONFIG_PNPACPI=y
CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_RAM=y
CONFIG_BLK_DEV_RAM_COUNT=16
CONFIG_BLK_DEV_RAM_SIZE=16384
CONFIG_BLK_DEV_RAM_BLOCKSIZE=1024
CONFIG_MISC_DEVICES=y
CONFIG_IDE=y
CONFIG_BLK_DEV_IDE=y

CONFIG_BLK_DEV_IDEDISK=y
CONFIG_IDEDISK_MULTI_MODE=y
CONFIG_BLK_DEV_IDECD=y
CONFIG_BLK_DEV_IDEFLOPPY=y
CONFIG_BLK_DEV_IDESCSI=y
CONFIG_IDE_PROC_FS=y

CONFIG_IDE_GENERIC=y
CONFIG_BLK_DEV_IDEPCI=y
CONFIG_IDEPCI_SHARE_IRQ=y
CONFIG_IDEPCI_PCIBUS_ORDER=y
CONFIG_BLK_DEV_GENERIC=y
CONFIG_BLK_DEV_IDEDMA_PCI=y
CONFIG_BLK_DEV_PIIX=y
CONFIG_BLK_DEV_IDEDMA=y

CONFIG_SCSI=y
CONFIG_SCSI_DMA=y
CONFIG_SCSI_PROC_FS=y

CONFIG_BLK_DEV_SD=y
CONFIG_CHR_DEV_SG=y

CONFIG_SCSI_LOGGING=y
CONFIG_SCSI_WAIT_SCAN=m

CONFIG_SCSI_LOWLEVEL=y
CONFIG_SCSI_3W_9XXX=y
CONFIG_SCSI_BUSLOGIC=y
CONFIG_ATA=y
CONFIG_ATA_ACPI=y
CONFIG_SATA_AHCI=y
CONFIG_ATA_PIIX=y
CONFIG_MD=y
CONFIG_BLK_DEV_MD=y
CONFIG_MD_LINEAR=y
CONFIG_MD_RAID0=y
CONFIG_MD_RAID1=y
CONFIG_MD_MULTIPATH=y


CONFIG_NETDEVICES=y
CONFIG_DUMMY=y
CONFIG_NETDEV_1000=y
CONFIG_E1000=y
CONFIG_E1000_NAPI=y


CONFIG_INPUT=y
CONFIG_INPUT_FF_MEMLESS=y

CONFIG_INPUT_MOUSEDEV=y
CONFIG_INPUT_MOUSEDEV_SCREEN_X=1024
CONFIG_INPUT_MOUSEDEV_SCREEN_Y=768
CONFIG_INPUT_EVDEV=y

CONFIG_INPUT_KEYBOARD=y
CONFIG_KEYBOARD_ATKBD=y

CONFIG_SERIO=y
CONFIG_SERIO_I8042=y
CONFIG_SERIO_LIBPS2=y

CONFIG_VT=y
CONFIG_VT_CONSOLE=y
CONFIG_HW_CONSOLE=y

CONFIG_FIX_EARLYCON_MEM=y

CONFIG_UNIX98_PTYS=y
CONFIG_LEGACY_PTYS=y
CONFIG_LEGACY_PTY_COUNT=256
CONFIG_NVRAM=y
CONFIG_RTC=y
CONFIG_AGP=y
CONFIG_AGP_ATI=y
CONFIG_RAW_DRIVER=y
CONFIG_MAX_RAW_DEVS=8192
CONFIG_DEVPORT=y
CONFIG_I2C=y
CONFIG_I2C_BOARDINFO=y
CONFIG_I2C_CHARDEV=y

CONFIG_I2C_ALGOBIT=y
CONFIG_I2C_ALGOPCF=y
CONFIG_I2C_ALGOPCA=y

CONFIG_I2C_I801=y
CONFIG_I2C_I810=y
CONFIG_I2C_PIIX4=y


CONFIG_HWMON=y
CONFIG_HWMON_VID=y
CONFIG_SENSORS_CORETEMP=y
CONFIG_SENSORS_LM85=y





CONFIG_VGA_CONSOLE=y
CONFIG_VIDEO_SELECT=y
CONFIG_DUMMY_CONSOLE=y






CONFIG_EXT2_FS=y
CONFIG_EXT2_FS_XATTR=y
CONFIG_EXT2_FS_POSIX_ACL=y
CONFIG_EXT3_FS=y
CONFIG_EXT3_FS_XATTR=y
CONFIG_EXT3_FS_POSIX_ACL=y
CONFIG_JBD=y
CONFIG_FS_MBCACHE=y
CONFIG_FS_POSIX_ACL=y
CONFIG_INOTIFY=y
CONFIG_INOTIFY_USER=y
CONFIG_DNOTIFY=y
CONFIG_AUTOFS4_FS=y

CONFIG_ISO9660_FS=y
CONFIG_JOLIET=y
CONFIG_ZISOFS=y


CONFIG_PROC_FS=y
CONFIG_PROC_KCORE=y
CONFIG_PROC_SYSCTL=y
CONFIG_SYSFS=y
CONFIG_TMPFS=y
CONFIG_HUGETLBFS=y
CONFIG_HUGETLB_PAGE=y
CONFIG_RAMFS=y



CONFIG_MSDOS_PARTITION=y

CONFIG_NLS=y
CONFIG_NLS_DEFAULT="utf8"
CONFIG_NLS_CODEPAGE_437=y
CONFIG_NLS_CODEPAGE_852=y
CONFIG_NLS_ASCII=y
CONFIG_NLS_ISO8859_1=y
CONFIG_NLS_UTF8=y


CONFIG_TRACE_IRQFLAGS_SUPPORT=y
CONFIG_ENABLE_MUST_CHECK=y
CONFIG_MAGIC_SYSRQ=y
CONFIG_UNUSED_SYMBOLS=y
CONFIG_DEBUG_BUGVERBOSE=y
CONFIG_EARLY_PRINTK=y
CONFIG_X86_FIND_SMP_CONFIG=y
CONFIG_X86_MPPARSE=y
CONFIG_DOUBLEFAULT=y


CONFIG_GRKERNSEC=y
CONFIG_GRKERNSEC_CUSTOM=y

CONFIG_GRKERNSEC_KMEM=y
CONFIG_GRKERNSEC_BRUTE=y
CONFIG_GRKERNSEC_HIDESYM=y

CONFIG_GRKERNSEC_ACL_HIDEKERN=y
CONFIG_GRKERNSEC_ACL_MAXTRIES=3
CONFIG_GRKERNSEC_ACL_TIMEOUT=30


CONFIG_GRKERNSEC_PROC_IPADDR=y

CONFIG_GRKERNSEC_DMESG=y
CONFIG_GRKERNSEC_TPE=y
CONFIG_GRKERNSEC_TPE_GID=1000

CONFIG_GRKERNSEC_RANDNET=y

CONFIG_GRKERNSEC_SYSCTL=y
CONFIG_GRKERNSEC_SYSCTL_ON=y

CONFIG_GRKERNSEC_FLOODTIME=10
CONFIG_GRKERNSEC_FLOODBURST=4


CONFIG_SECURITY=y
CONFIG_SECURITY_CAPABILITIES=y
CONFIG_CRYPTO=y
CONFIG_CRYPTO_ALGAPI=y
CONFIG_CRYPTO_HASH=y
CONFIG_CRYPTO_MANAGER=y
CONFIG_CRYPTO_HMAC=y
CONFIG_CRYPTO_MD5=y
CONFIG_CRYPTO_SHA1=y
CONFIG_CRYPTO_SHA256=y
CONFIG_CRYPTO_BLOWFISH=y

CONFIG_BITREVERSE=y
CONFIG_CRC32=y
CONFIG_ZLIB_INFLATE=y
CONFIG_TEXTSEARCH=y
CONFIG_TEXTSEARCH_KMP=y
CONFIG_TEXTSEARCH_BM=y
CONFIG_TEXTSEARCH_FSM=y
CONFIG_PLIST=y
CONFIG_HAS_IOMEM=y
CONFIG_HAS_IOPORT=y
CONFIG_HAS_DMA=y
CONFIG_GENERIC_HARDIRQS=y
CONFIG_GENERIC_IRQ_PROBE=y
CONFIG_GENERIC_PENDING_IRQ=y
CONFIG_X86_SMP=y
CONFIG_X86_HT=y
CONFIG_X86_BIOS_REBOOT=y
CONFIG_X86_TRAMPOLINE=y
CONFIG_KTIME_SCALAR=y

erikd wrote:If you use kernel >=2.6.22(i think it was) and <2.6.24 your problem might be related to this thread(not a grsec problem):
http://groups.google.se/group/fa.linux.kernel/browse_frm/thread/bfb1ebb25bda2d3a/0da07b5bb35a780e?hl=sv&lnk=gst&q=2.6.22-stable+causes+oomkiller+to+be+invoked.
My post is the last one(by date) and implementing the patch into my 2.6.22.9 kernel fixed my problem (mysterious oom on machines with >=4Gb ram) and the patch is in 2.6.24 so im just waiting for a grsec release now

that patch seems nice, but is not working for the version I posted before, and I don;t have anough knoweldge about patching it by hand, sorry

btnet wrote:that patch seems nice, but is not working for the version I posted before, and I don;t have anough knoweldge about patching it by hand, sorry

since nothing really stands out from your .config and slabinfo, i suggest you do try out this patch at least. i wonder why it didn't apply for you, mm/quicklist.c hasn't changed since last May, probably it's whitespace damaged only (try patch -l). as for applying it by hand, it's really simple in this case: just open mm/quicklist.c in an editor then first remove the two lines that begin with '-' in the patch and then add the lines beginning with '+' (without the '+' obviously) in their place.

thank you, I patched the kernel and rebootted with it.
nothing more to do, I hope i won;t see a crash anymore