grsecurity forums

I have celeron 900 mhz +512mem , 40hdd wd, 2 net cards.
I have this error form kernel 2.6.18.2 to 2.6.19.3
I can compile kernel with patch without any problems, but after restart , kernel panic:

*pte = 349161
Oops: 0003 [#1]
SMP
Modules linked in:
CPU: 0
EIP: 0060:[<c013df19>] Not tainted VLI
EFLAGS: 00010046 (2.6.19.3-grsec #1)
eax: c0349000 ebx: dfcce820 ecx: c03ca780 edx: 00000000
esi: dfc815b0 edi: dfcce650 ebp: dfc81780 esp: dfd17fa0
ds: 0068 es: 0068 ss: 0068
Process khelper (pid: 276, ti=dfd17000 task=dfcce650 task.ti=dfd17000)
Stack: dfcce650 c03ca780 c141b240 c08ca800 c14bdd20 c013ee50 c0168f47
00000000 dfec2ed0 00000000 00000000 00000000 00000000 00000068 00000068
ffffffff c0140180 00000068 00000286 00000000 00000000 00000000 00000000
Call Trace:
[<c013ee50>] <0>
Leftover inexact backtrace:

[<c0140180>] <0> ==================
Code: 41 10 39 d0 74 10 66 89 51 10 b9 74 01 00 00 8b 43 1c 31 d2 0f 30 8c 65 28 8c 6d 2c c1 e7 0c 8b 53 04 8d 87 00 98 34 c0 8b 3c 24 <89> 50 34 8b 53 0c 8b 8f d0 01 00 00 89 50 3c 8b 53 14 89 48 30
EIP: [<c013df19>] SS:ESP 0068:dfd17fa0

_


any ideas??

urbiusz wrote:I have celeron 900 mhz +512mem , 40hdd wd, 2 net cards.
I have this error form kernel 2.6.18.2 to 2.6.19.3
I can compile kernel with patch without any problems, but after restart , kernel panic:

you probably have DEBUG_RODATA enabled, it's not compatible with PaX, you should use KERNEXEC if you really need enforced kernel read-only stuff (and a lot more that KERNEXEC provides), or just don't enable that feature.

thx , works fine now. You're the men!