grsec smp oops

[lilo]

Hi

Sucks grsec with smp, only on smp:

Oops: 0000
CPU: 0
EIP: 0010:[gr_handle_exec_args+422/895] Not tainted
EFLAGS: 00010282
eax: 00000000 ebx: 08108010 ecx: f7592220 edx: c8902000
esi: 0000002a edi: 00000014 ebp: dfafbdc4 esp: dfafbd4c
ds: 0018 es: 0018 ss: 0018
Process exim4 (pid: 3881, stackpage=dfafb000)
Stack: c1c1de60 c890225a 0000516b 00000008 00000008 00000008 00000008 00000000
e122cca0 dfafbe64 080f0546 08108034 00000003 250000e0 7273752f 6962732f
78652f6e 20346d69 20634d2d 76514331 302d6f65 51353030 47502d42 00000020
Call Trace: [do_execve+623/960] [timer_bh+54/980] [bh_action+76/140] [tasklet_hi_action+103/160] [do_softirq+125/220]
[__lru_cache_del+116/124] [sys_execve+47/96] [system_call+51/64]

Code: 8b 40 08 50 e8 a1 53 00 00 83 c4 08 eb 05 b8 00 ef 42 c0 ba



Oops: 0000
CPU: 0
EIP: 0010:[gr_log_chroot_exec+220/652] Not tainted
EFLAGS: 00010282
eax: 00000000 ebx: f7965320 ecx: f78f87e0 edx: c53ec000
esi: c1c1dea0 edi: f6f2e460 ebp: 08105798 esp: f1997da8
ds: 0018 es: 0018 ss: 0018
Process exim4 (pid: 10119, stackpage=f1997000)
Stack: c1c1dea0 c53ec25a 00003635 00000008 00000008 00000008 00000008 00000000
cb9a5240 f1997e64 c0218820 f6f2e460 c1c1dea0 c4388000 c4388000 080ca8a0
f1997fb8 00000001 f1997ee4 f1997ee4 f1997e64 f1996000 c7b8201e f7229c20
Call Trace: [do_execve+616/960] [ip_local_deliver+385/396] [ip_local_deliver_finish+0/304] [ip_rcv_finish+477/542] [sys_execve+47/96]
[system_call+51/64]

Code: 8b 40 08 50 e8 2f 70 00 00 83 c4 08 eb 0b 8d b6 00 00 00 00


Need more information for debugging?

[spender]

Is this a vanilla 2.4.27 kernel patched with grsecurity?

-Brad

[lilo]

No. this is a 2.4.26 with freeswan, mppe, tproxy and other small patches.
But grsec part unchenged.

[spender]

Where there any failed hunks when patching? Could you get an oops report from a kernel with only grsecurity patched into the kernel?

-Brad

[lilo]

Only one hunk generated, and resolved:

diff -urN linux-2.4.26/net/ipv4/netfilter/Makefile linux-2.4.26/net/ipv4/netfilter/Makefile
--- linux-2.4.26/net/ipv4/netfilter/Makefile 2003-08-25 07:44:44.000000000 -0400
+++ linux-2.4.26/net/ipv4/netfilter/Makefile 2004-04-18 10:17:01.000000000 -0400
@@ -88,6 +88,7 @@
obj-$(CONFIG_IP_NF_MATCH_UNCLEAN) += ipt_unclean.o
obj-$(CONFIG_IP_NF_MATCH_TCPMSS) += ipt_tcpmss.o
obj-$(CONFIG_IP_NF_MATCH_TPROXY) += ipt_tproxy.o
+obj-$(CONFIG_IP_NF_MATCH_STEALTH) += ipt_stealth.o

# targets
obj-$(CONFIG_IP_NF_TARGET_REJECT) += ipt_REJECT.o

I cant testing without all (require) patches. (Sorry)