by Kp » Sat Sep 29, 2007 4:04 pm
What distribution are you using, and are you up to date on patches for it?
If you have time, try using the Custom security level to enable individual features. Start with all features enabled by Medium security, and verify that the system boots successfully. If it does, add half of the features that are in High but not in Medium. Test whether the system boots. If yes, add more features. If not, remove some features. Eventually, you should be able to find the feature(s) that cause the error. Knowing this can guide the developers, and may even reveal that you do not actually need the feature that causes the failure.
You can find what features are in each level by looking at the select statements for GRKERNSEC_MEDIUM and GRKERNSEC_HIGH in /usr/src/linux/grsecurity/Kconfig.