grsecurity forums

Hi,
did anyone tested yet if the last grsec patch works fine with 2.6.18.3 kernel?

Raf256 wrote:Hi,
did anyone tested yet if the last grsec patch works fine with 2.6.18.3 kernel?

yes it is working but grsec set to high still kills init (even when used with nosep kernel option)

2.6.18.3 and grsecurity-2.1.9-2.6.18.2-200611100917 - no problems here.

kolargol, I doubt it is PaX problem. Test yourself:

Code: Select all

readelf -e /sbin/init | grep STACK

this should return something like:

Code: Select all

GNU_STACK      0x000000 0x00000000 0x00000000 0x00000 0x00000 RW  0x4

but if you get RWX in place RW from my output you will have your answer.

PaX deny stack been read, write and executable in programs.

If patch works with 2.6.8.13 then perhaps the file in ~spender should be renamed officially?

tosh wrote:2.6.18.3 and grsecurity-2.1.9-2.6.18.2-200611100917 - no problems here.

kolargol, I doubt it is PaX problem. Test yourself:

Code: Select all

readelf -e /sbin/init | grep STACK

this should return something like:

Code: Select all

GNU_STACK      0x000000 0x00000000 0x00000000 0x00000 0x00000 RW  0x4

but if you get RWX in place RW from my output you will have your answer.

PaX deny stack been read, write and executable in programs.

actually i got:

Code: Select all

GNU_STACK      0x000000 0x00000000 0x00000000 0x00000 0x00000 RW  0x4


so no X flag there...