grsecurity forums

Hi,

my kernel is patched with grsecurity-1.9.7a-2.4.29, the more important actived options are:

Buffer Overflow Protection:
-> Enforce non-executable pages
-> Segmentation based non-executable pages
-> Restrict mprotect()
-> Addres Space Layout Randomization
-> Randomize user stack base
-> Randomize mmap() base
-> Deny access to /dev/mem
Filesystem Protection
-> Proc restriction
-> Linking restriction
-> FIFO restriction
-> Chroot jail restrictions
-> Capability restrictions within chroot

When I try to compile an ada program using gnat-3.13p it says:

gnatmake demo1.adb
gcc -c demo1.adb
gcc: Internal compiler error: program gnat1 got fatal signal 9
gnatmake: "demo1.adb" compilation error

It's impossible to compile, i have tried to do it with root and with a normal user.

Any ideas?

I have searched for chpax to see if I can do something with that, but the web is down and I don't know where to get it. Do you know any other place where I can find it different form http://pageexec.virtualave.net/?

Thank you.

marble wrote:gnatmake demo1.adb
gcc -c demo1.adb
gcc: Internal compiler error: program gnat1 got fatal signal 9
gnatmake: "demo1.adb" compilation error

It's impossible to compile, i have tried to do it with root and with a normal user.

signal 9 is SIGKILL and it's most likely that gnat1 triggered PaX. if you take a look at your kernel log messages, you should be able to find it out for sure ('grep PAX /var/log/messages' or something like that). in any case chpax should help.

I have searched for chpax to see if I can do something with that, but the web is down and I don't know where to get it. Do you know any other place where I can find it different form http://pageexec.virtualave.net/?

strange, i just tried it and had no problems. if you still can't get it, email pageexec (at) freemail.hu and i'll send it to you (alternatively you can subscribe to the mailing list and get the last version from the mail archives which was posted by mayhem a few weeks ago).

I have tried again to get into the pax web and it has worked! Now I can try to solve my problem. Thank you for your information.