Page 1 of 1

Strange behavior with grsec

PostPosted: Mon Jan 10, 2005 12:51 pm
by crusader
Hi,

i have noticed a strange behavior on my machines with kernel version greater than 2.4.24 with grsecurity and with these two options set on Intel Xeon:

CONFIG_PAX_NOEXEC=y
CONFIG_PAX_SEGMEXEC=y

i`m using apache + suexec on my servers and RLIMIT directives in httpd.conf to limit the resources of the web applications

when i upgrade to kernel version greater than 2.4.24 and enable grsecurity
many applications doesn`t work because the given resources are not enough for examle memory limit 35MB per process

with CONFIG_PAX_NOEXEC & CONFIG_PAX_SEGMEXEC there is no such problem with any 2.4.* kernel

on 2.4.24 with these options enabled and older there is no problem also

thanks in advance