Page 1 of 1

grsec denies X session

PostPosted: Wed Aug 20, 2014 8:49 am
by ice9
The recent version of Xorg 1.16 allow X to be executed from normal user however grsec dines that with the below errors, I can only run "startx" by root.
Also can't start login manager using systemd even by root.

Code: Select all
Aug 19 20:11:44 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:581] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/startx[startx:564] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 20:11:50 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:655] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/pulseaudio[pulseaudio:654] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 20:11:52 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 20 for /usr/lib/rtkit/rtkit-daemon[rtkit-daemon:656] uid/euid:133/133 gid/egid:133/133, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 19 20:12:03 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/VBoxClient[VBoxClient:787] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/VBoxClient-all[VBoxClient-all:766] uid/euid:1000/1000 gid/egid:1001/1001

Aug 19 20:12:24 Computer kernel: grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/lib/tracker/tracker-extract[tracker-extract:773] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/gnome-session[gnome-session:587] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 20:13:13 Computer kernel: grsec: denied exec of usermode helper binary  located outside of /sbin and system library paths
Aug 19 20:14:14 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:571] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/startx[startx:554] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 20:14:21 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:623] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/pulseaudio[pulseaudio:622] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 20:14:22 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 20 for /usr/lib/rtkit/rtkit-daemon[rtkit-daemon:624] uid/euid:133/133 gid/egid:133/133, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 19 20:14:35 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/VBoxClient[VBoxClient:781] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/VBoxClient-all[VBoxClient-all:759] uid/euid:1000/1000 gid/egid:1001/1001

Aug 19 20:14:55 Computer kernel: grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/lib/tracker/tracker-extract[tracker-extract:767] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/gnome-session[gnome-session:578] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 20:57:48 Computer kernel: grsec: denied exec of usermode helper binary  located outside of /sbin and system library paths

Aug 19 22:37:41 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:540] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/startx[startx:523] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 22:39:36 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:570] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/xinit[xinit:569] uid/euid:0/0 gid/egid:0/0
Aug 19 22:41:48 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:542] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/startx[startx:523] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 22:42:11 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:565] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/startx[startx:546] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 22:42:22 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:590] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/xinit[xinit:589] uid/euid:0/0 gid/egid:0/0
Aug 19 22:48:14 Computer kernel: grsec: denied exec of usermode helper binary  located outside of /sbin and system library paths
Aug 19 22:52:26 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:547] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/startx[startx:530] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 22:56:13 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:607] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/xinit[xinit:606] uid/euid:0/0 gid/egid:0/0
Aug 19 22:57:41 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:542] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:525] uid/euid:1000/1000 gid/egid:1000/1000
Aug 19 22:58:46 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:662] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:645] uid/euid:1000/1000 gid/egid:1000/1000
Aug 19 23:01:54 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:763] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:746] uid/euid:1000/1000 gid/egid:1000/1000

Aug 19 23:24:37 Computer kernel: grsec: denied exec of usermode helper binary  located outside of /sbin and system library paths
Aug 19 23:24:37 Computer kernel: grsec: denied exec of usermode helper binary  located outside of /sbin and system library paths
Aug 19 23:56:24 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:592] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:575] uid/euid:1000/1000 gid/egid:1000/1000
Aug 19 23:58:50 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:701] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:684] uid/euid:1000/1000 gid/egid:1000/1000
Aug 19 23:59:25 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:747] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:730] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 00:00:33 Computer kernel: grsec: denied exec of usermode helper binary  located outside of /sbin and system library paths
Aug 20 00:00:33 Computer kernel: grsec: denied exec of usermode helper binary  located outside of /sbin and system library paths
Aug 20 01:10:09 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:584] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:567] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 01:10:22 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:605] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:588] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 01:14:36 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:640] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/xinit[xinit:639] uid/euid:0/0 gid/egid:0/0
Aug 20 01:16:23 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:1092] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/xinit[xinit:1091] uid/euid:0/0 gid/egid:0/0
Aug 20 04:51:49 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:508] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/gdm[gdm:495] uid/euid:0/0 gid/egid:0/0
Aug 20 04:51:55 Computer kernel: grsec: denied kernel module auto-load of fuse by uid 120
Aug 20 04:51:57 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:659] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:658] uid/euid:120/120 gid/egid:120/120
Aug 20 04:51:58 Computer kernel: grsec: denied priority change of process (rtkit-daemon:661) by /usr/lib/rtkit/rtkit-daemon[rtkit-daemon:661] uid/euid:133/133 gid/egid:133/133, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 20 04:51:59 Computer kernel: grsec: denied resource overstep by requesting 30 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:659] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:658] uid/euid:120/120 gid/egid:120/120

Aug 20 04:53:36 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:712] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/gdm[gdm:495] uid/euid:0/0 gid/egid:0/0
Aug 20 04:53:37 Computer kernel: grsec: denied kernel module auto-load of fuse by uid 120
Aug 20 04:53:37 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:766] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:765] uid/euid:120/120 gid/egid:120/120

Aug 20 04:53:56 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:799] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/gdm[gdm:794] uid/euid:0/0 gid/egid:0/0
Aug 20 04:53:57 Computer kernel: grsec: denied kernel module auto-load of fuse by uid 120
Aug 20 04:53:58 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:853] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:852] uid/euid:120/120 gid/egid:120/120
Aug 20 04:53:58 Computer kernel: grsec: denied resource overstep by requesting 30 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:853] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:852] uid/euid:120/120 gid/egid:120/120
Aug 20 04:53:58 Computer kernel: grsec: denied resource overstep by requesting 29 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:853] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:852] uid/euid:120/120 gid/egid:120/120

Aug 20 04:54:31 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:894] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/lightdm[lightdm:890] uid/euid:0/0 gid/egid:0/0
Aug 20 04:54:31 Computer kernel: grsec: denied resource overstep by requesting 177311744 for RLIMIT_MEMLOCK against limit 65536 for /usr/bin/lightdm-gtk-greeter[lightdm-gtk-gre:908] uid/euid:620/620 gid/egid:620/620, parent /usr/bin/lightdm[lightdm:903] uid/euid:0/0 gid/egid:0/0
Aug 20 04:54:46 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:973] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/pulseaudio[pulseaudio:972] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 04:54:47 Computer kernel: grsec: denied resource overstep by requesting 30 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:973] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/pulseaudio[pulseaudio:972] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 04:54:47 Computer kernel: grsec: denied resource overstep by requesting 29 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:973] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/pulseaudio[pulseaudio:972] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 04:54:47 Computer kernel: grsec: denied resource overstep by requesting 28 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:973] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/pulseaudio[pulseaudio:972] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 04:54:48 Computer kernel: grsec: denied resource overstep by requesting 27 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:973] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/pulseaudio[pulseaudio:972] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 04:54:49 Computer kernel: grsec: denied resource overstep by requesting 26 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:973] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/pulseaudio[pulseaudio:972] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 04:54:49 Computer kernel: grsec: denied resource overstep by requesting 25 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:973] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/pulseaudio[pulseaudio:972] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 04:54:50 Computer kernel: grsec: denied kernel module auto-load of fuse by uid 1000
Aug 20 04:56:02 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:1156] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/lightdm[lightdm:890] uid/euid:0/0 gid/egid:0/0
Aug 20 04:56:03 Computer kernel: grsec: denied resource overstep by requesting 177311744 for RLIMIT_MEMLOCK against limit 65536 for /usr/bin/lightdm-gtk-greeter[lightdm-gtk-gre:1164] uid/euid:620/620 gid/egid:620/620, parent /usr/bin/lightdm[lightdm:1162] uid/euid:0/0 gid/egid:0/0

Re: grsec denies X session

PostPosted: Wed Aug 20, 2014 10:23 pm
by spender
This may be unrelated, but can you apply the following patch and give me the kernel log output?

https://grsecurity.net/~spender/umh_debug.diff

-Brad

Re: grsec denies X session

PostPosted: Thu Aug 21, 2014 7:22 am
by strcat
Does it work if you use /etc/X11/Xwrapper.config to set `needs_root_rights = yes` instead of the default of `auto`? The new xorg-server does work for me (and many others) as non-root with grsecurity on Arch. It seems you're running it as a VirtualBox guest and I suspect that it may be partly responsible for the issue. If it doesn't support KMS, then it will be taking the privileged fallback path. That code path could be hitting a bug / incompatibility in grsecurity, and it makes sense that no one else has hit this because the usual culprits are nvidia / catalyst. It might just be that you need to allow privileged I/O though.

Re: grsec denies X session

PostPosted: Thu Aug 21, 2014 11:01 am
by ice9
@strcat: It's running on physical machine not vbox;.
I have added `needs_root_rights = yes` and I was able to startx but suddenly it crashed before showing the complete desktop giving empty screen with "logout" button.
Also KMS is enabled by MODULE "i915" in /etc/mkinitcpio.conf

@spender: I have applied that patch.

Log:
Code: Select all
Aug 21 17:32:33 Computer kernel: grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/bin/gnome-shell[gnome-shell:705] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/gnome-session[gnome-session:581] uid/euid:1000/1000 gid/egid:1000/1000
Aug 21 17:32:34 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/VBoxClient[VBoxClient:755] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/VBoxClient-all[VBoxClient-all:728] uid/euid:1000/1000 gid/egid:1000/1000
Aug 21 17:32:35 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/VBoxClient[VBoxClient:758] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/VBoxClient-all[VBoxClient-all:728] uid/euid:1000/1000 gid/egid:1000/1000
Aug 21 17:32:36 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/VBoxClient[VBoxClient:761] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/VBoxClient-all[VBoxClient-all:728] uid/euid:1000/1000 gid/egid:1000/1000
Aug 21 17:32:37 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/VBoxClient[VBoxClient:764] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/VBoxClient-all[VBoxClient-all:728] uid/euid:1000/1000 gid/egid:1000/1000
Aug 21 17:32:37 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/VBoxClient[VBoxClient:767] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/VBoxClient-all[VBoxClient-all:728] uid/euid:1000/1000 gid/egid:1000/1000
Aug 21 17:32:53 Computer kernel: grsec: mount of tmpfs to /run/user/0 by /usr/lib/systemd/systemd-logind[systemd-logind:363] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:07 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:898] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/gdm[gdm:892] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:08 Computer kernel: grsec: unmount of tmpfs by /usr/lib/systemd/systemd-logind[systemd-logind:363] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:08 Computer kernel: grsec: mount of tmpfs to /run/user/120 by /usr/lib/systemd/systemd-logind[systemd-logind:363] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:08 Computer kernel: grsec: denied kernel module auto-load of fuse by uid 120
Aug 21 17:35:09 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:966] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:965] uid/euid:120/120 gid/egid:120/120
Aug 21 17:35:09 Computer kernel: grsec: denied resource overstep by requesting 30 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:966] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:965] uid/euid:120/120 gid/egid:120/120
Aug 21 17:35:09 Computer kernel: grsec: denied resource overstep by requesting 29 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:966] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:965] uid/euid:120/120 gid/egid:120/120
Aug 21 17:35:09 Computer kernel: grsec: denied resource overstep by requesting 28 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:966] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:965] uid/euid:120/120 gid/egid:120/120
Aug 21 17:35:10 Computer kernel: grsec: denied resource overstep by requesting 27 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:966] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:965] uid/euid:120/120 gid/egid:120/120
Aug 21 17:35:10 Computer kernel: grsec: denied resource overstep by requesting 26 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:966] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:965] uid/euid:120/120 gid/egid:120/120
Aug 21 17:35:10 Computer kernel: grsec: more alerts, logging disabled for 10 seconds
Aug 21 17:35:10 Computer kernel: grsec: mount of none to / by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of /tmp/systemd-private-12a6d3e345e84c35b4884b77a66e9c13-systemd-localed.service-B9g97t/tmp to /tmp by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of /var/tmp/systemd-private-12a6d3e345e84c35b4884b77a66e9c13-systemd-localed.service-EQ3v73/tmp to /var/tmp by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of tmpfs to /tmp/namespace-dev-oD6faE/dev by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of /dev/pts to /tmp/namespace-dev-oD6faE/dev/pts by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of /dev/shm to /tmp/namespace-dev-oD6faE/dev/shm by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of /dev/mqueue to /tmp/namespace-dev-oD6faE/dev/mqueue by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of /dev/hugepages to /tmp/namespace-dev-oD6faE/dev/hugepages by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of /tmp/namespace-dev-oD6faE/dev to /dev/ by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: unmount of /dev/mapper/vg-home by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of /run/systemd/inaccessible to /home by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: unmount of tmpfs by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: unmount of tmpfs by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of /run/systemd/inaccessible to /run/user by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of /run/systemd/inaccessible to /root by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of none to /tmp by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of none to /var/tmp by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of none to /dev by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of none to /dev/shm by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of none to /dev/pts by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of none to /dev/hugepages by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of none to /dev/mqueue by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of none to /home by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of none to /run/user by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of none to /root by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of /usr to /usr by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of none to /usr by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of /boot to /boot by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of none to /boot by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:35:10 Computer kernel: grsec: mount of none to / by /usr/lib/systemd/systemd[(-localed):978] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:14 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:1003] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/gdm[gdm:998] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:15 Computer kernel: grsec: denied kernel module auto-load of fuse by uid 120
Aug 21 17:36:16 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:1058] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:1057] uid/euid:120/120 gid/egid:120/120
Aug 21 17:36:16 Computer kernel: grsec: denied resource overstep by requesting 30 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:1058] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:1057] uid/euid:120/120 gid/egid:120/120
Aug 21 17:36:16 Computer kernel: grsec: denied resource overstep by requesting 29 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:1058] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:1057] uid/euid:120/120 gid/egid:120/120
Aug 21 17:36:16 Computer kernel: grsec: denied resource overstep by requesting 28 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:1058] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:1057] uid/euid:120/120 gid/egid:120/120
Aug 21 17:36:16 Computer kernel: grsec: denied resource overstep by requesting 27 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:1058] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:1057] uid/euid:120/120 gid/egid:120/120
Aug 21 17:36:16 Computer kernel: grsec: denied resource overstep by requesting 26 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:1058] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:1057] uid/euid:120/120 gid/egid:120/120
Aug 21 17:36:17 Computer kernel: grsec: more alerts, logging disabled for 10 seconds
Aug 21 17:36:17 Computer kernel: grsec: mount of none to / by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of /tmp/systemd-private-12a6d3e345e84c35b4884b77a66e9c13-systemd-localed.service-biCSkm/tmp to /tmp by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of /var/tmp/systemd-private-12a6d3e345e84c35b4884b77a66e9c13-systemd-localed.service-Bg8MFK/tmp to /var/tmp by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of tmpfs to /tmp/namespace-dev-WTdu38/dev by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of /dev/pts to /tmp/namespace-dev-WTdu38/dev/pts by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of /dev/shm to /tmp/namespace-dev-WTdu38/dev/shm by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of /dev/mqueue to /tmp/namespace-dev-WTdu38/dev/mqueue by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of /dev/hugepages to /tmp/namespace-dev-WTdu38/dev/hugepages by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of /tmp/namespace-dev-WTdu38/dev to /dev/ by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: unmount of /dev/mapper/vg-home by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of /run/systemd/inaccessible to /home by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: unmount of tmpfs by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: unmount of tmpfs by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of /run/systemd/inaccessible to /run/user by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of /run/systemd/inaccessible to /root by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of none to /tmp by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of none to /var/tmp by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of none to /dev by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of none to /dev/shm by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of none to /dev/pts by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of none to /dev/hugepages by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of none to /dev/mqueue by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of none to /home by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of none to /run/user by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of none to /root by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of /usr to /usr by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of none to /usr by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of /boot to /boot by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of none to /boot by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:36:17 Computer kernel: grsec: mount of none to / by /usr/lib/systemd/systemd[(-localed):1067] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:37:21 Computer kernel: grsec: unmount of tmpfs by /usr/bin/umount[umount:1167] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:37:21 Computer kernel: grsec: unmount of tmpfs by /usr/bin/umount[umount:1170] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:37:21 Computer kernel: grsec: unmount of tmpfs by /usr/bin/umount[umount:1168] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:37:21 Computer kernel: grsec: unmount of /dev/mapper/vg-home by /usr/bin/umount[umount:1169] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 21 17:37:26 Computer kernel: grsec: unmount of systemd-1 by /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0, parent /[swapper/0:0] uid/euid:0/0 gid/egid:0/0
Aug 21 17:37:26 Computer kernel: grsec: denied exec of usermode helper binary  located outside of /sbin and system library paths
Aug 21 17:37:26 Computer kernel: grsec: denied exec of usermode helper binary  located outside of /sbin and system library paths



# modinfo i915 | grep parm
Code: Select all
parm:           modeset:Use kernel modesetting [KMS] (0=DRM_I915_KMS from .config, 1=on, -1=force vga console preference [default]) (int)
parm:           panel_ignore_lid:Override lid status (0=autodetect, 1=autodetect disabled [default], -1=force lid closed, -2=force lid open) (int)
parm:           powersave:Enable powersavings, fbc, downclocking, etc. (default: true) (int)
parm:           semaphores:Use semaphores for inter-ring sync (default: -1 (use per-chip defaults)) (int)
parm:           enable_rc6:Enable power-saving render C-state 6. Different stages can be selected via bitmask values (0 = disable; 1 = enable rc6; 2 = enable deep rc6; 4 = enable deepest rc6). For example, 3 would enable rc6 and deep rc6, and 7 would enable everything. default: -1 (use per-chip default) (int)
parm:           enable_fbc:Enable frame buffer compression for power savings (default: -1 (use per-chip default)) (int)
parm:           lvds_downclock:Use panel (LVDS/eDP) downclocking for power savings (default: false) (int)
parm:           lvds_channel_mode:Specify LVDS channel mode (0=probe BIOS [default], 1=single-channel, 2=dual-channel) (int)
parm:           lvds_use_ssc:Use Spread Spectrum Clock with panels [LVDS/eDP] (default: auto from VBT) (int)
parm:           vbt_sdvo_panel_type:Override/Ignore selection of SDVO panel mode in the VBT (-2=ignore, -1=auto [default], index in VBT BIOS table) (int)
parm:           reset:Attempt GPU resets (default: true) (bool)
parm:           enable_hangcheck:Periodically check GPU activity for detecting hangs. WARNING: Disabling this can cause system wide hangs. (default: true) (bool)
parm:           enable_ppgtt:Override PPGTT usage. (-1=auto [default], 0=disabled, 1=aliasing, 2=full) (int)
parm:           enable_psr:Enable PSR (default: false) (int)
parm:           preliminary_hw_support:Enable preliminary hardware support. (int)
parm:           disable_power_well:Disable the power well when possible (default: true) (int)
parm:           enable_ips:Enable IPS (default: true) (int)
parm:           fastboot:Try to skip unnecessary mode sets at boot time (default: false) (bool)
parm:           prefault_disable:Disable page prefaulting for pread/pwrite/reloc (default:false). For developers only. (bool)
parm:           invert_brightness:Invert backlight brightness (-1 force normal, 0 machine defaults, 1 force inversion), please report PCI device ID, subsystem vendor and subsystem device ID to dri-devel@lists.freedesktop.org, if your machine needs it. It will then be included in an upcoming module version. (int)
parm:           disable_display:Disable display (default: false) (bool)
parm:           enable_cmd_parser:Enable command parsing (1=enabled, 0=disabled [default]) (int)



And these are the used modules for this kernel:
Code: Select all
CONFIG_64BIT=y
CONFIG_X86_64=y
CONFIG_X86=y
CONFIG_INSTRUCTION_DECODER=y
CONFIG_LOCKDEP_SUPPORT=y
CONFIG_STACKTRACE_SUPPORT=y
CONFIG_HAVE_LATENCYTOP_SUPPORT=y
CONFIG_MMU=y
CONFIG_NEED_DMA_MAP_STATE=y
CONFIG_NEED_SG_DMA_LENGTH=y
CONFIG_GENERIC_ISA_DMA=y
CONFIG_GENERIC_BUG=y
CONFIG_GENERIC_BUG_RELATIVE_POINTERS=y
CONFIG_GENERIC_HWEIGHT=y
CONFIG_ARCH_MAY_HAVE_PC_FDC=y
CONFIG_RWSEM_XCHGADD_ALGORITHM=y
CONFIG_GENERIC_CALIBRATE_DELAY=y
CONFIG_ARCH_HAS_CPU_RELAX=y
CONFIG_ARCH_HAS_CACHE_LINE_SIZE=y
CONFIG_HAVE_SETUP_PER_CPU_AREA=y
CONFIG_NEED_PER_CPU_EMBED_FIRST_CHUNK=y
CONFIG_NEED_PER_CPU_PAGE_FIRST_CHUNK=y
CONFIG_ARCH_HIBERNATION_POSSIBLE=y
CONFIG_ARCH_SUSPEND_POSSIBLE=y
CONFIG_ARCH_WANT_HUGE_PMD_SHARE=y
CONFIG_ARCH_WANT_GENERAL_HUGETLB=y
CONFIG_ZONE_DMA32=y
CONFIG_AUDIT_ARCH=y
CONFIG_ARCH_SUPPORTS_OPTIMIZED_INLINING=y
CONFIG_ARCH_SUPPORTS_DEBUG_PAGEALLOC=y
CONFIG_HAVE_INTEL_TXT=y
CONFIG_X86_64_SMP=y
CONFIG_X86_HT=y
CONFIG_ARCH_SUPPORTS_UPROBES=y
CONFIG_IRQ_WORK=y
CONFIG_BUILDTIME_EXTABLE_SORT=y
CONFIG_LOCALVERSION_AUTO=y
CONFIG_HAVE_KERNEL_GZIP=y
CONFIG_HAVE_KERNEL_BZIP2=y
CONFIG_HAVE_KERNEL_LZMA=y
CONFIG_HAVE_KERNEL_XZ=y
CONFIG_HAVE_KERNEL_LZO=y
CONFIG_HAVE_KERNEL_LZ4=y
CONFIG_KERNEL_GZIP=y
CONFIG_SWAP=y
CONFIG_SYSVIPC=y
CONFIG_SYSVIPC_SYSCTL=y
CONFIG_POSIX_MQUEUE=y
CONFIG_POSIX_MQUEUE_SYSCTL=y
CONFIG_FHANDLE=y
CONFIG_HAVE_ARCH_AUDITSYSCALL=y
CONFIG_GENERIC_IRQ_PROBE=y
CONFIG_GENERIC_IRQ_SHOW=y
CONFIG_GENERIC_PENDING_IRQ=y
CONFIG_IRQ_DOMAIN=y
CONFIG_IRQ_FORCED_THREADING=y
CONFIG_SPARSE_IRQ=y
CONFIG_CLOCKSOURCE_WATCHDOG=y
CONFIG_ARCH_CLOCKSOURCE_DATA=y
CONFIG_GENERIC_TIME_VSYSCALL=y
CONFIG_GENERIC_CLOCKEVENTS=y
CONFIG_GENERIC_CLOCKEVENTS_BUILD=y
CONFIG_GENERIC_CLOCKEVENTS_BROADCAST=y
CONFIG_GENERIC_CLOCKEVENTS_MIN_ADJUST=y
CONFIG_GENERIC_CMOS_UPDATE=y
CONFIG_TICK_ONESHOT=y
CONFIG_NO_HZ_COMMON=y
CONFIG_NO_HZ_IDLE=y
CONFIG_HIGH_RES_TIMERS=y
CONFIG_TICK_CPU_ACCOUNTING=y
CONFIG_BSD_PROCESS_ACCT=y
CONFIG_BSD_PROCESS_ACCT_V3=y
CONFIG_TASKSTATS=y
CONFIG_TASK_DELAY_ACCT=y
CONFIG_TASK_XACCT=y
CONFIG_TASK_IO_ACCOUNTING=y
CONFIG_TREE_PREEMPT_RCU=y
CONFIG_PREEMPT_RCU=y
CONFIG_RCU_STALL_COMMON=y
CONFIG_RCU_FAST_NO_HZ=y
CONFIG_IKCONFIG=y
CONFIG_IKCONFIG_PROC=y
CONFIG_HAVE_UNSTABLE_SCHED_CLOCK=y
CONFIG_ARCH_SUPPORTS_NUMA_BALANCING=y
CONFIG_ARCH_SUPPORTS_INT128=y
CONFIG_ARCH_WANTS_PROT_NUMA_PROT_NONE=y
CONFIG_ARCH_USES_NUMA_PROT_NONE=y
CONFIG_NUMA_BALANCING_DEFAULT_ENABLED=y
CONFIG_NUMA_BALANCING=y
CONFIG_CGROUPS=y
CONFIG_CGROUP_FREEZER=y
CONFIG_CGROUP_DEVICE=y
CONFIG_CPUSETS=y
CONFIG_PROC_PID_CPUSET=y
CONFIG_CGROUP_CPUACCT=y
CONFIG_RESOURCE_COUNTERS=y
CONFIG_MEMCG=y
CONFIG_MEMCG_SWAP=y
CONFIG_CGROUP_SCHED=y
CONFIG_FAIR_GROUP_SCHED=y
CONFIG_CFS_BANDWIDTH=y
CONFIG_RT_GROUP_SCHED=y
CONFIG_BLK_CGROUP=y
CONFIG_NAMESPACES=y
CONFIG_UTS_NS=y
CONFIG_IPC_NS=y
CONFIG_PID_NS=y
CONFIG_NET_NS=y
CONFIG_SCHED_AUTOGROUP=y
CONFIG_MM_OWNER=y
CONFIG_RELAY=y
CONFIG_BLK_DEV_INITRD=y
CONFIG_RD_GZIP=y
CONFIG_RD_BZIP2=y
CONFIG_RD_LZMA=y
CONFIG_RD_XZ=y
CONFIG_RD_LZO=y
CONFIG_RD_LZ4=y
CONFIG_SYSCTL=y
CONFIG_ANON_INODES=y
CONFIG_HAVE_UID16=y
CONFIG_SYSCTL_EXCEPTION_TRACE=y
CONFIG_HAVE_PCSPKR_PLATFORM=y
CONFIG_UID16=y
CONFIG_SYSFS_SYSCALL=y
CONFIG_KALLSYMS=y
CONFIG_PRINTK=y
CONFIG_BUG=y
CONFIG_ELF_CORE=y
CONFIG_PCSPKR_PLATFORM=y
CONFIG_BASE_FULL=y
CONFIG_FUTEX=y
CONFIG_EPOLL=y
CONFIG_SIGNALFD=y
CONFIG_TIMERFD=y
CONFIG_EVENTFD=y
CONFIG_SHMEM=y
CONFIG_AIO=y
CONFIG_PCI_QUIRKS=y
CONFIG_HAVE_PERF_EVENTS=y
CONFIG_PERF_EVENTS=y
CONFIG_VM_EVENT_COUNTERS=y
CONFIG_SLUB_DEBUG=y
CONFIG_SLUB=y
CONFIG_SLUB_CPU_PARTIAL=y
CONFIG_PROFILING=y
CONFIG_TRACEPOINTS=y
CONFIG_HAVE_OPROFILE=y
CONFIG_OPROFILE_NMI_TIMER=y
CONFIG_KPROBES=y
CONFIG_JUMP_LABEL=y
CONFIG_KPROBES_ON_FTRACE=y
CONFIG_UPROBES=y
CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS=y
CONFIG_ARCH_USE_BUILTIN_BSWAP=y
CONFIG_KRETPROBES=y
CONFIG_USER_RETURN_NOTIFIER=y
CONFIG_HAVE_IOREMAP_PROT=y
CONFIG_HAVE_KPROBES=y
CONFIG_HAVE_KRETPROBES=y
CONFIG_HAVE_OPTPROBES=y
CONFIG_HAVE_KPROBES_ON_FTRACE=y
CONFIG_HAVE_ARCH_TRACEHOOK=y
CONFIG_HAVE_DMA_ATTRS=y
CONFIG_GENERIC_SMP_IDLE_THREAD=y
CONFIG_HAVE_REGS_AND_STACK_ACCESS_API=y
CONFIG_HAVE_CLK=y
CONFIG_HAVE_DMA_API_DEBUG=y
CONFIG_HAVE_HW_BREAKPOINT=y
CONFIG_HAVE_MIXED_BREAKPOINTS_REGS=y
CONFIG_HAVE_USER_RETURN_NOTIFIER=y
CONFIG_HAVE_PERF_EVENTS_NMI=y
CONFIG_HAVE_PERF_REGS=y
CONFIG_HAVE_PERF_USER_STACK_DUMP=y
CONFIG_HAVE_ARCH_JUMP_LABEL=y
CONFIG_ARCH_HAVE_NMI_SAFE_CMPXCHG=y
CONFIG_HAVE_ALIGNED_STRUCT_PAGE=y
CONFIG_HAVE_CMPXCHG_LOCAL=y
CONFIG_HAVE_CMPXCHG_DOUBLE=y
CONFIG_ARCH_WANT_COMPAT_IPC_PARSE_VERSION=y
CONFIG_ARCH_WANT_OLD_COMPAT_IPC=y
CONFIG_HAVE_ARCH_SECCOMP_FILTER=y
CONFIG_SECCOMP_FILTER=y
CONFIG_HAVE_CC_STACKPROTECTOR=y
CONFIG_CC_STACKPROTECTOR=y
CONFIG_CC_STACKPROTECTOR_STRONG=y
CONFIG_HAVE_CONTEXT_TRACKING=y
CONFIG_HAVE_VIRT_CPU_ACCOUNTING_GEN=y
CONFIG_HAVE_IRQ_TIME_ACCOUNTING=y
CONFIG_HAVE_ARCH_TRANSPARENT_HUGEPAGE=y
CONFIG_HAVE_ARCH_SOFT_DIRTY=y
CONFIG_MODULES_USE_ELF_RELA=y
CONFIG_HAVE_IRQ_EXIT_ON_IRQ_STACK=y
CONFIG_OLD_SIGSUSPEND3=y
CONFIG_COMPAT_OLD_SIGACTION=y
CONFIG_SLABINFO=y
CONFIG_RT_MUTEXES=y
CONFIG_MODULES=y
CONFIG_MODULE_FORCE_LOAD=y
CONFIG_MODULE_UNLOAD=y
CONFIG_MODULE_FORCE_UNLOAD=y
CONFIG_MODVERSIONS=y
CONFIG_STOP_MACHINE=y
CONFIG_BLOCK=y
CONFIG_BLK_DEV_BSG=y
CONFIG_BLK_DEV_BSGLIB=y
CONFIG_BLK_DEV_INTEGRITY=y
CONFIG_BLK_DEV_THROTTLING=y
CONFIG_PARTITION_ADVANCED=y
CONFIG_AIX_PARTITION=y
CONFIG_MAC_PARTITION=y
CONFIG_MSDOS_PARTITION=y
CONFIG_BSD_DISKLABEL=y
CONFIG_MINIX_SUBPARTITION=y
CONFIG_SOLARIS_X86_PARTITION=y
CONFIG_LDM_PARTITION=y
CONFIG_KARMA_PARTITION=y
CONFIG_EFI_PARTITION=y
CONFIG_BLOCK_COMPAT=y
CONFIG_IOSCHED_NOOP=y
CONFIG_IOSCHED_DEADLINE=y
CONFIG_IOSCHED_CFQ=y
CONFIG_CFQ_GROUP_IOSCHED=y
CONFIG_DEFAULT_CFQ=y
CONFIG_PREEMPT_NOTIFIERS=y
CONFIG_UNINLINE_SPIN_UNLOCK=y
CONFIG_ARCH_SUPPORTS_ATOMIC_RMW=y
CONFIG_MUTEX_SPIN_ON_OWNER=y
CONFIG_FREEZER=y
CONFIG_ZONE_DMA=y
CONFIG_SMP=y
CONFIG_X86_X2APIC=y
CONFIG_X86_MPPARSE=y
CONFIG_X86_INTEL_LPSS=y
CONFIG_X86_SUPPORTS_MEMORY_FAILURE=y
CONFIG_SCHED_OMIT_FRAME_POINTER=y
CONFIG_HYPERVISOR_GUEST=y
CONFIG_PARAVIRT=y
CONFIG_XEN=y
CONFIG_XEN_DOM0=y
CONFIG_XEN_PVHVM=y
CONFIG_XEN_SAVE_RESTORE=y
CONFIG_XEN_PVH=y
CONFIG_KVM_GUEST=y
CONFIG_PARAVIRT_TIME_ACCOUNTING=y
CONFIG_PARAVIRT_CLOCK=y
CONFIG_NO_BOOTMEM=y
CONFIG_GENERIC_CPU=y
CONFIG_X86_TSC=y
CONFIG_X86_CMPXCHG64=y
CONFIG_X86_CMOV=y
CONFIG_X86_DEBUGCTLMSR=y
CONFIG_CPU_SUP_INTEL=y
CONFIG_CPU_SUP_AMD=y
CONFIG_CPU_SUP_CENTAUR=y
CONFIG_HPET_TIMER=y
CONFIG_HPET_EMULATE_RTC=y
CONFIG_DMI=y
CONFIG_GART_IOMMU=y
CONFIG_CALGARY_IOMMU=y
CONFIG_CALGARY_IOMMU_ENABLED_BY_DEFAULT=y
CONFIG_SWIOTLB=y
CONFIG_IOMMU_HELPER=y
CONFIG_SCHED_SMT=y
CONFIG_SCHED_MC=y
CONFIG_PREEMPT=y
CONFIG_PREEMPT_COUNT=y
CONFIG_X86_LOCAL_APIC=y
CONFIG_X86_IO_APIC=y
CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y
CONFIG_X86_MCE=y
CONFIG_X86_MCE_INTEL=y
CONFIG_X86_MCE_AMD=y
CONFIG_X86_MCE_THRESHOLD=y
CONFIG_X86_THERMAL_VECTOR=y
CONFIG_X86_16BIT=y
CONFIG_X86_ESPFIX64=y
CONFIG_MICROCODE=m
CONFIG_MICROCODE_INTEL=y
CONFIG_MICROCODE_AMD=y
CONFIG_MICROCODE_OLD_INTERFACE=y
CONFIG_ARCH_PHYS_ADDR_T_64BIT=y
CONFIG_ARCH_DMA_ADDR_T_64BIT=y
CONFIG_DIRECT_GBPAGES=y
CONFIG_NUMA=y
CONFIG_AMD_NUMA=y
CONFIG_X86_64_ACPI_NUMA=y
CONFIG_NODES_SPAN_OTHER_NODES=y
CONFIG_ARCH_SPARSEMEM_ENABLE=y
CONFIG_ARCH_SPARSEMEM_DEFAULT=y
CONFIG_ARCH_SELECT_MEMORY_MODEL=y
CONFIG_ARCH_MEMORY_PROBE=y
CONFIG_SELECT_MEMORY_MODEL=y
CONFIG_SPARSEMEM_MANUAL=y
CONFIG_SPARSEMEM=y
CONFIG_NEED_MULTIPLE_NODES=y
CONFIG_HAVE_MEMORY_PRESENT=y
CONFIG_SPARSEMEM_EXTREME=y
CONFIG_SPARSEMEM_VMEMMAP_ENABLE=y
CONFIG_SPARSEMEM_ALLOC_MEM_MAP_TOGETHER=y
CONFIG_SPARSEMEM_VMEMMAP=y
CONFIG_HAVE_MEMBLOCK=y
CONFIG_HAVE_MEMBLOCK_NODE_MAP=y
CONFIG_ARCH_DISCARD_MEMBLOCK=y
CONFIG_MEMORY_ISOLATION=y
CONFIG_HAVE_BOOTMEM_INFO_NODE=y
CONFIG_MEMORY_HOTPLUG=y
CONFIG_MEMORY_HOTPLUG_SPARSE=y
CONFIG_MEMORY_HOTREMOVE=y
CONFIG_PAGEFLAGS_EXTENDED=y
CONFIG_ARCH_ENABLE_SPLIT_PMD_PTLOCK=y
CONFIG_COMPACTION=y
CONFIG_MIGRATION=y
CONFIG_ARCH_ENABLE_HUGEPAGE_MIGRATION=y
CONFIG_PHYS_ADDR_T_64BIT=y
CONFIG_BOUNCE=y
CONFIG_VIRT_TO_BUS=y
CONFIG_MMU_NOTIFIER=y
CONFIG_KSM=y
CONFIG_ARCH_SUPPORTS_MEMORY_FAILURE=y
CONFIG_MEMORY_FAILURE=y
CONFIG_TRANSPARENT_HUGEPAGE=y
CONFIG_TRANSPARENT_HUGEPAGE_ALWAYS=y
CONFIG_CROSS_MEMORY_ATTACH=y
CONFIG_CLEANCACHE=y
CONFIG_FRONTSWAP=y
CONFIG_ZBUD=y
CONFIG_ZSWAP=y
CONFIG_ZSMALLOC=y
CONFIG_GENERIC_EARLY_IOREMAP=y
CONFIG_X86_CHECK_BIOS_CORRUPTION=y
CONFIG_X86_BOOTPARAM_MEMORY_CORRUPTION_CHECK=y
CONFIG_MTRR=y
CONFIG_MTRR_SANITIZER=y
CONFIG_X86_PAT=y
CONFIG_ARCH_USES_PG_UNCACHED=y
CONFIG_ARCH_RANDOM=y
CONFIG_X86_SMAP=y
CONFIG_EFI=y
CONFIG_EFI_STUB=y
CONFIG_EFI_MIXED=y
CONFIG_SECCOMP=y
CONFIG_HZ_300=y
CONFIG_SCHED_HRTICK=y
CONFIG_RELOCATABLE=y
CONFIG_HOTPLUG_CPU=y
CONFIG_ARCH_ENABLE_MEMORY_HOTPLUG=y
CONFIG_ARCH_ENABLE_MEMORY_HOTREMOVE=y
CONFIG_USE_PERCPU_NUMA_NODE_ID=y
CONFIG_SUSPEND=y
CONFIG_SUSPEND_FREEZER=y
CONFIG_HIBERNATE_CALLBACKS=y
CONFIG_PM_SLEEP=y
CONFIG_PM_SLEEP_SMP=y
CONFIG_PM_AUTOSLEEP=y
CONFIG_PM_WAKELOCKS=y
CONFIG_PM_WAKELOCKS_GC=y
CONFIG_PM_RUNTIME=y
CONFIG_PM=y
CONFIG_PM_DEBUG=y
CONFIG_PM_ADVANCED_DEBUG=y
CONFIG_PM_SLEEP_DEBUG=y
CONFIG_PM_TRACE=y
CONFIG_PM_TRACE_RTC=y
CONFIG_PM_CLK=y
CONFIG_ACPI=y
CONFIG_ACPI_SLEEP=y
CONFIG_ACPI_AC=m
CONFIG_ACPI_BATTERY=m
CONFIG_ACPI_BUTTON=m
CONFIG_ACPI_VIDEO=m
CONFIG_ACPI_DOCK=y
CONFIG_ACPI_PROCESSOR=m
CONFIG_ACPI_HOTPLUG_CPU=y
CONFIG_ACPI_THERMAL=m
CONFIG_ACPI_NUMA=y
CONFIG_ACPI_INITRD_TABLE_OVERRIDE=y
CONFIG_ACPI_PCI_SLOT=y
CONFIG_X86_PM_TIMER=y
CONFIG_ACPI_CONTAINER=y
CONFIG_ACPI_HOTPLUG_MEMORY=y
CONFIG_ACPI_HED=y
CONFIG_ACPI_BGRT=y
CONFIG_ACPI_APEI=y
CONFIG_ACPI_APEI_GHES=y
CONFIG_ACPI_APEI_PCIEAER=y
CONFIG_ACPI_APEI_MEMORY_FAILURE=y
CONFIG_SFI=y
CONFIG_CPU_FREQ=y
CONFIG_CPU_FREQ_GOV_COMMON=y
CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND=y
CONFIG_CPU_FREQ_GOV_PERFORMANCE=y
CONFIG_CPU_FREQ_GOV_ONDEMAND=y
CONFIG_X86_INTEL_PSTATE=y
CONFIG_CPU_IDLE=y
CONFIG_CPU_IDLE_GOV_LADDER=y
CONFIG_CPU_IDLE_GOV_MENU=y
CONFIG_INTEL_IDLE=y
CONFIG_PCI=y
CONFIG_PCI_DIRECT=y
CONFIG_PCI_MMCONFIG=y
CONFIG_PCI_XEN=y
CONFIG_PCI_DOMAINS=y
CONFIG_PCIEPORTBUS=y
CONFIG_HOTPLUG_PCI_PCIE=y
CONFIG_PCIEAER=y
CONFIG_PCIEASPM=y
CONFIG_PCIEASPM_DEFAULT=y
CONFIG_PCIE_PME=y
CONFIG_PCI_MSI=y
CONFIG_PCI_REALLOC_ENABLE_AUTO=y
CONFIG_HT_IRQ=y
CONFIG_PCI_ATS=y
CONFIG_PCI_IOV=y
CONFIG_PCI_PRI=y
CONFIG_PCI_PASID=y
CONFIG_PCI_IOAPIC=y
CONFIG_PCI_LABEL=y
CONFIG_ISA_DMA_API=y
CONFIG_AMD_NB=y
CONFIG_HOTPLUG_PCI=y
CONFIG_HOTPLUG_PCI_ACPI=y
CONFIG_HOTPLUG_PCI_CPCI=y
CONFIG_HOTPLUG_PCI_SHPC=m
CONFIG_BINFMT_ELF=y
CONFIG_COMPAT_BINFMT_ELF=y
CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE=y
CONFIG_BINFMT_SCRIPT=y
CONFIG_BINFMT_MISC=y
CONFIG_COREDUMP=y
CONFIG_IA32_EMULATION=y
CONFIG_COMPAT=y
CONFIG_COMPAT_FOR_U64_ALIGNMENT=y
CONFIG_SYSVIPC_COMPAT=y
CONFIG_KEYS_COMPAT=y
CONFIG_X86_DEV_DMA_OPS=y
CONFIG_NET=y
CONFIG_COMPAT_NETLINK_MESSAGES=y
CONFIG_PACKET=y
CONFIG_UNIX=y
CONFIG_INET=y
CONFIG_IP_MULTICAST=y
CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IP_FIB_TRIE_STATS=y
CONFIG_IP_MULTIPLE_TABLES=y
CONFIG_IP_ROUTE_MULTIPATH=y
CONFIG_IP_ROUTE_VERBOSE=y
CONFIG_IP_MROUTE=y
CONFIG_IP_PIMSM_V1=y
CONFIG_IP_PIMSM_V2=y
CONFIG_SYN_COOKIES=y
CONFIG_INET_LRO=y
CONFIG_TCP_CONG_ADVANCED=y
CONFIG_TCP_CONG_CUBIC=y
CONFIG_DEFAULT_CUBIC=y
CONFIG_IPV6=y
CONFIG_IPV6_ROUTER_PREF=y
CONFIG_IPV6_ROUTE_INFO=y
CONFIG_IPV6_OPTIMISTIC_DAD=y
CONFIG_IPV6_MULTIPLE_TABLES=y
CONFIG_IPV6_SUBTREES=y
CONFIG_NETLABEL=y
CONFIG_NETWORK_SECMARK=y
CONFIG_NET_PTP_CLASSIFY=y
CONFIG_NETWORK_PHY_TIMESTAMPING=y
CONFIG_NETFILTER=y
CONFIG_NETFILTER_ADVANCED=y
CONFIG_HAVE_NET_DSA=y
CONFIG_6LOWPAN_IPHC=m
CONFIG_NET_SCHED=y
CONFIG_NET_CLS_ACT=y
CONFIG_NET_SCH_FIFO=y
CONFIG_NETLINK_MMAP=y
CONFIG_RPS=y
CONFIG_RFS_ACCEL=y
CONFIG_XPS=y
CONFIG_CGROUP_NET_CLASSID=y
CONFIG_NET_RX_BUSY_POLL=y
CONFIG_BQL=y
CONFIG_BPF_JIT=y
CONFIG_NET_FLOW_LIMIT=y
CONFIG_HAMRADIO=y
CONFIG_BT=m
CONFIG_BT_6LOWPAN=y
CONFIG_BT_HCIBTUSB=m
CONFIG_FIB_RULES=y
CONFIG_WIRELESS=y
CONFIG_WEXT_CORE=y
CONFIG_WEXT_PROC=y
CONFIG_CFG80211=m
CONFIG_CFG80211_DEFAULT_PS=y
CONFIG_CFG80211_WEXT=y
CONFIG_MAC80211=m
CONFIG_MAC80211_HAS_RC=y
CONFIG_MAC80211_RC_MINSTREL=y
CONFIG_MAC80211_RC_MINSTREL_HT=y
CONFIG_MAC80211_RC_DEFAULT_MINSTREL=y
CONFIG_MAC80211_MESH=y
CONFIG_MAC80211_LEDS=y
CONFIG_RFKILL=m
CONFIG_RFKILL_LEDS=y
CONFIG_RFKILL_INPUT=y
CONFIG_HAVE_BPF_JIT=y
CONFIG_DEVTMPFS=y
CONFIG_STANDALONE=y
CONFIG_PREVENT_FIRMWARE_BUILD=y
CONFIG_FW_LOADER=y
CONFIG_FW_LOADER_USER_HELPER=y
CONFIG_SYS_HYPERVISOR=y
CONFIG_GENERIC_CPU_AUTOPROBE=y
CONFIG_REGMAP=y
CONFIG_REGMAP_MMIO=y
CONFIG_DMA_SHARED_BUFFER=y
CONFIG_CONNECTOR=y
CONFIG_PROC_EVENTS=y
CONFIG_ARCH_MIGHT_HAVE_PC_PARPORT=y
CONFIG_PNP=y
CONFIG_PNPACPI=y
CONFIG_BLK_DEV=y
CONFIG_CDROM_PKTCDVD=m
CONFIG_INTEL_MEI=m
CONFIG_INTEL_MEI_ME=m
CONFIG_HAVE_IDE=y
CONFIG_SCSI_MOD=m
CONFIG_SCSI=m
CONFIG_SCSI_DMA=y
CONFIG_SCSI_PROC_FS=y
CONFIG_BLK_DEV_SD=m
CONFIG_BLK_DEV_SR=m
CONFIG_BLK_DEV_SR_VENDOR=y
CONFIG_SCSI_MULTI_LUN=y
CONFIG_SCSI_SCAN_ASYNC=y
CONFIG_SCSI_LOWLEVEL=y
CONFIG_MEGARAID_NEWGEN=y
CONFIG_ATA=m
CONFIG_ATA_VERBOSE_ERROR=y
CONFIG_ATA_ACPI=y
CONFIG_SATA_ZPODD=y
CONFIG_SATA_PMP=y
CONFIG_SATA_AHCI=m
CONFIG_SATA_AHCI_PLATFORM=m
CONFIG_SATA_ACARD_AHCI=m
CONFIG_ATA_SFF=y
CONFIG_ATA_BMDMA=y
CONFIG_MD=y
CONFIG_BLK_DEV_DM_BUILTIN=y
CONFIG_BLK_DEV_DM=m
CONFIG_DM_BUFIO=m
CONFIG_DM_CRYPT=m
CONFIG_DM_SNAPSHOT=m
CONFIG_DM_MIRROR=m
CONFIG_DM_UEVENT=y
CONFIG_FUSION=y
CONFIG_MACINTOSH_DRIVERS=y
CONFIG_MAC_EMUMOUSEBTN=m
CONFIG_NETDEVICES=y
CONFIG_NET_CORE=y
CONFIG_ETHERNET=y
CONFIG_MDIO=m
CONFIG_NET_VENDOR_3COM=y
CONFIG_NET_VENDOR_ADAPTEC=y
CONFIG_NET_VENDOR_ALTEON=y
CONFIG_NET_VENDOR_AMD=y
CONFIG_NET_VENDOR_ARC=y
CONFIG_NET_VENDOR_ATHEROS=y
CONFIG_ALX=m
CONFIG_NET_VENDOR_BROADCOM=y
CONFIG_NET_VENDOR_BROCADE=y
CONFIG_NET_VENDOR_CHELSIO=y
CONFIG_NET_VENDOR_CISCO=y
CONFIG_NET_VENDOR_DEC=y
CONFIG_NET_TULIP=y
CONFIG_NET_VENDOR_DLINK=y
CONFIG_NET_VENDOR_EMULEX=y
CONFIG_NET_VENDOR_EXAR=y
CONFIG_NET_VENDOR_HP=y
CONFIG_NET_VENDOR_INTEL=y
CONFIG_NET_VENDOR_I825XX=y
CONFIG_NET_VENDOR_MARVELL=y
CONFIG_NET_VENDOR_MELLANOX=y
CONFIG_NET_VENDOR_MICREL=y
CONFIG_NET_VENDOR_MICROCHIP=y
CONFIG_NET_VENDOR_MYRI=y
CONFIG_NET_VENDOR_NATSEMI=y
CONFIG_NET_VENDOR_8390=y
CONFIG_NET_VENDOR_NVIDIA=y
CONFIG_NET_VENDOR_OKI=y
CONFIG_NET_PACKET_ENGINE=y
CONFIG_NET_VENDOR_QLOGIC=y
CONFIG_NET_VENDOR_REALTEK=y
CONFIG_NET_VENDOR_RDC=y
CONFIG_NET_VENDOR_SAMSUNG=y
CONFIG_NET_VENDOR_SEEQ=y
CONFIG_NET_VENDOR_SILAN=y
CONFIG_NET_VENDOR_SIS=y
CONFIG_NET_VENDOR_SMSC=y
CONFIG_NET_VENDOR_STMICRO=y
CONFIG_NET_VENDOR_SUN=y
CONFIG_NET_VENDOR_TEHUTI=y
CONFIG_NET_VENDOR_TI=y
CONFIG_NET_VENDOR_VIA=y
CONFIG_NET_VENDOR_WIZNET=y
CONFIG_WLAN=y
CONFIG_IWLWIFI=m
CONFIG_IWLDVM=m
CONFIG_IWLWIFI_OPMODE_MODULAR=y
CONFIG_IWLWIFI_DEVICE_TRACING=y
CONFIG_WL_TI=y
CONFIG_ISDN=y
CONFIG_INPUT=y
CONFIG_INPUT_FF_MEMLESS=m
CONFIG_INPUT_SPARSEKMAP=m
CONFIG_INPUT_MOUSEDEV=m
CONFIG_INPUT_MOUSEDEV_PSAUX=y
CONFIG_INPUT_JOYDEV=m
CONFIG_INPUT_EVDEV=m
CONFIG_INPUT_KEYBOARD=y
CONFIG_KEYBOARD_ATKBD=m
CONFIG_INPUT_MOUSE=y
CONFIG_MOUSE_PS2=m
CONFIG_MOUSE_PS2_ALPS=y
CONFIG_MOUSE_PS2_LOGIPS2PP=y
CONFIG_MOUSE_PS2_SYNAPTICS=y
CONFIG_MOUSE_PS2_CYPRESS=y
CONFIG_MOUSE_PS2_LIFEBOOK=y
CONFIG_MOUSE_PS2_TRACKPOINT=y
CONFIG_MOUSE_PS2_ELANTECH=y
CONFIG_MOUSE_PS2_SENTELIC=y
CONFIG_MOUSE_PS2_TOUCHKIT=y
CONFIG_INPUT_JOYSTICK=y
CONFIG_INPUT_TABLET=y
CONFIG_INPUT_TOUCHSCREEN=y
CONFIG_INPUT_MISC=y
CONFIG_INPUT_PCSPKR=m
CONFIG_SERIO=m
CONFIG_ARCH_MIGHT_HAVE_PC_SERIO=y
CONFIG_SERIO_I8042=m
CONFIG_SERIO_LIBPS2=m
CONFIG_SERIO_RAW=m
CONFIG_TTY=y
CONFIG_VT=y
CONFIG_CONSOLE_TRANSLATIONS=y
CONFIG_VT_CONSOLE=y
CONFIG_VT_CONSOLE_SLEEP=y
CONFIG_HW_CONSOLE=y
CONFIG_VT_HW_CONSOLE_BINDING=y
CONFIG_UNIX98_PTYS=y
CONFIG_DEVPTS_MULTIPLE_INSTANCES=y
CONFIG_SERIAL_NONSTANDARD=y
CONFIG_SERIAL_8250=y
CONFIG_SERIAL_8250_PNP=y
CONFIG_SERIAL_8250_CONSOLE=y
CONFIG_FIX_EARLYCON_MEM=y
CONFIG_SERIAL_8250_DMA=y
CONFIG_SERIAL_8250_PCI=y
CONFIG_SERIAL_CORE=y
CONFIG_SERIAL_CORE_CONSOLE=y
CONFIG_HVC_DRIVER=y
CONFIG_HVC_IRQ=y
CONFIG_HVC_XEN=y
CONFIG_HVC_XEN_FRONTEND=y
CONFIG_HPET=y
CONFIG_HPET_MMAP=y
CONFIG_HPET_MMAP_DEFAULT=y
CONFIG_I2C=m
CONFIG_I2C_BOARDINFO=y
CONFIG_I2C_COMPAT=y
CONFIG_I2C_MUX=m
CONFIG_I2C_HELPER_AUTO=y
CONFIG_I2C_ALGOBIT=m
CONFIG_I2C_I801=m
CONFIG_SPI=y
CONFIG_SPI_MASTER=y
CONFIG_PINCTRL=y
CONFIG_ARCH_WANT_OPTIONAL_GPIOLIB=y
CONFIG_GPIOLIB=y
CONFIG_GPIO_DEVRES=y
CONFIG_GPIO_ACPI=y
CONFIG_GPIO_SYSFS=y
CONFIG_POWER_SUPPLY=y
CONFIG_POWER_RESET=y
CONFIG_POWER_AVS=y
CONFIG_HWMON=m
CONFIG_SENSORS_CORETEMP=m
CONFIG_THERMAL=y
CONFIG_THERMAL_DEFAULT_GOV_STEP_WISE=y
CONFIG_THERMAL_GOV_FAIR_SHARE=y
CONFIG_THERMAL_GOV_STEP_WISE=y
CONFIG_THERMAL_GOV_USER_SPACE=y
CONFIG_INTEL_POWERCLAMP=m
CONFIG_X86_PKG_TEMP_THERMAL=m
CONFIG_WATCHDOG=y
CONFIG_WATCHDOG_CORE=y
CONFIG_ITCO_WDT=m
CONFIG_ITCO_VENDOR_SUPPORT=y
CONFIG_SSB_POSSIBLE=y
CONFIG_BCMA_POSSIBLE=y
CONFIG_MFD_CORE=m
CONFIG_LPC_ICH=m
CONFIG_ABX500_CORE=y
CONFIG_MFD_SYSCON=y
CONFIG_MEDIA_SUPPORT=m
CONFIG_MEDIA_CAMERA_SUPPORT=y
CONFIG_MEDIA_ANALOG_TV_SUPPORT=y
CONFIG_MEDIA_DIGITAL_TV_SUPPORT=y
CONFIG_MEDIA_RADIO_SUPPORT=y
CONFIG_MEDIA_RC_SUPPORT=y
CONFIG_MEDIA_CONTROLLER=y
CONFIG_VIDEO_DEV=m
CONFIG_VIDEO_V4L2_SUBDEV_API=y
CONFIG_VIDEO_V4L2=m
CONFIG_VIDEOBUF2_CORE=m
CONFIG_VIDEOBUF2_MEMOPS=m
CONFIG_VIDEOBUF2_VMALLOC=m
CONFIG_DVB_CORE=m
CONFIG_DVB_NET=y
CONFIG_RC_CORE=m
CONFIG_RC_DECODERS=y
CONFIG_RC_DEVICES=y
CONFIG_MEDIA_USB_SUPPORT=y
CONFIG_USB_VIDEO_CLASS=m
CONFIG_USB_VIDEO_CLASS_INPUT_EVDEV=y
CONFIG_MEDIA_PCI_SUPPORT=y
CONFIG_V4L_MEM2MEM_DRIVERS=y
CONFIG_V4L_TEST_DRIVERS=y
CONFIG_RADIO_ADAPTERS=y
CONFIG_RADIO_SI470X=y
CONFIG_MEDIA_SUBDRV_AUTOSELECT=y
CONFIG_MEDIA_ATTACH=y
CONFIG_VIDEO_IR_I2C=m
CONFIG_MEDIA_TUNER=m
CONFIG_MEDIA_TUNER_SIMPLE=m
CONFIG_MEDIA_TUNER_TDA8290=m
CONFIG_MEDIA_TUNER_TDA827X=m
CONFIG_MEDIA_TUNER_TDA18271=m
CONFIG_MEDIA_TUNER_TDA9887=m
CONFIG_MEDIA_TUNER_TEA5761=m
CONFIG_MEDIA_TUNER_TEA5767=m
CONFIG_MEDIA_TUNER_MT20XX=m
CONFIG_MEDIA_TUNER_XC2028=m
CONFIG_MEDIA_TUNER_XC5000=m
CONFIG_MEDIA_TUNER_XC4000=m
CONFIG_MEDIA_TUNER_MC44S803=m
CONFIG_AGP=y
CONFIG_AGP_INTEL=m
CONFIG_INTEL_GTT=m
CONFIG_VGA_ARB=y
CONFIG_VGA_SWITCHEROO=y
CONFIG_DRM=m
CONFIG_DRM_KMS_HELPER=m
CONFIG_DRM_KMS_FB_HELPER=y
CONFIG_DRM_LOAD_EDID_FIRMWARE=y
CONFIG_DRM_I915=m
CONFIG_DRM_I915_KMS=y
CONFIG_DRM_I915_FBDEV=y
CONFIG_FB=y
CONFIG_FIRMWARE_EDID=y
CONFIG_FB_BOOT_VESA_SUPPORT=y
CONFIG_FB_CFB_FILLRECT=y
CONFIG_FB_CFB_COPYAREA=y
CONFIG_FB_CFB_IMAGEBLIT=y
CONFIG_FB_MODE_HELPERS=y
CONFIG_FB_TILEBLITTING=y
CONFIG_FB_VESA=y
CONFIG_FB_EFI=y
CONFIG_BACKLIGHT_LCD_SUPPORT=y
CONFIG_BACKLIGHT_CLASS_DEVICE=y
CONFIG_HDMI=y
CONFIG_VGA_CONSOLE=y
CONFIG_DUMMY_CONSOLE=y
CONFIG_FRAMEBUFFER_CONSOLE=y
CONFIG_FRAMEBUFFER_CONSOLE_DETECT_PRIMARY=y
CONFIG_FRAMEBUFFER_CONSOLE_ROTATION=y
CONFIG_SOUND=m
CONFIG_SND=m
CONFIG_SND_TIMER=m
CONFIG_SND_PCM=m
CONFIG_SND_HWDEP=m
CONFIG_SND_JACK=y
CONFIG_SND_DYNAMIC_MINORS=y
CONFIG_SND_VERBOSE_PROCFS=y
CONFIG_SND_VMASTER=y
CONFIG_SND_KCTL_JACK=y
CONFIG_SND_DMA_SGBUF=y
CONFIG_SND_DRIVERS=y
CONFIG_SND_PCI=y
CONFIG_SND_HDA=m
CONFIG_SND_HDA_INTEL=m
CONFIG_SND_HDA_HWDEP=y
CONFIG_SND_HDA_RECONFIG=y
CONFIG_SND_HDA_INPUT_BEEP=y
CONFIG_SND_HDA_INPUT_JACK=y
CONFIG_SND_HDA_PATCH_LOADER=y
CONFIG_SND_HDA_CODEC_HDMI=m
CONFIG_SND_HDA_I915=y
CONFIG_SND_HDA_CODEC_CONEXANT=m
CONFIG_SND_HDA_GENERIC=m
CONFIG_SND_SPI=y
CONFIG_SND_USB=y
CONFIG_HID=m
CONFIG_HIDRAW=y
CONFIG_HID_GENERIC=m
CONFIG_HID_A4TECH=m
CONFIG_HID_APPLE=m
CONFIG_HID_BELKIN=m
CONFIG_HID_CHERRY=m
CONFIG_HID_CHICONY=m
CONFIG_HID_CYPRESS=m
CONFIG_HID_EZKEY=m
CONFIG_HID_KENSINGTON=m
CONFIG_HID_LOGITECH=m
CONFIG_LOGITECH_FF=y
CONFIG_LOGIRUMBLEPAD2_FF=y
CONFIG_LOGIG940_FF=y
CONFIG_LOGIWHEELS_FF=y
CONFIG_HID_MICROSOFT=m
CONFIG_HID_MONTEREY=m
CONFIG_USB_HID=m
CONFIG_HID_PID=y
CONFIG_USB_HIDDEV=y
CONFIG_USB_OHCI_LITTLE_ENDIAN=y
CONFIG_USB_SUPPORT=y
CONFIG_USB_COMMON=m
CONFIG_USB_ARCH_HAS_HCD=y
CONFIG_USB=m
CONFIG_USB_DEFAULT_PERSIST=y
CONFIG_USB_DYNAMIC_MINORS=y
CONFIG_USB_XHCI_HCD=m
CONFIG_USB_EHCI_HCD=m
CONFIG_USB_EHCI_ROOT_HUB_TT=y
CONFIG_USB_EHCI_TT_NEWSCHED=y
CONFIG_USB_EHCI_PCI=m
CONFIG_USB_STORAGE=m
CONFIG_USB_UAS=m
CONFIG_USB_GADGET=m
CONFIG_NEW_LEDS=y
CONFIG_LEDS_CLASS=m
CONFIG_LEDS_TRIGGERS=y
CONFIG_LEDS_TRIGGER_CPU=y
CONFIG_ACCESSIBILITY=y
CONFIG_A11Y_BRAILLE_CONSOLE=y
CONFIG_EDAC=y
CONFIG_EDAC_LEGACY_SYSFS=y
CONFIG_RTC_LIB=y
CONFIG_RTC_CLASS=y
CONFIG_RTC_HCTOSYS=y
CONFIG_RTC_SYSTOHC=y
CONFIG_RTC_INTF_SYSFS=y
CONFIG_RTC_INTF_PROC=y
CONFIG_RTC_INTF_DEV=y
CONFIG_RTC_INTF_DEV_UIE_EMUL=y
CONFIG_RTC_DRV_CMOS=y
CONFIG_DMADEVICES=y
CONFIG_DMA_ACPI=y
CONFIG_AUXDISPLAY=y
CONFIG_VIRT_DRIVERS=y
CONFIG_XEN_BALLOON=y
CONFIG_XEN_BALLOON_MEMORY_HOTPLUG=y
CONFIG_XEN_SCRUB_PAGES=y
CONFIG_XEN_BACKEND=y
CONFIG_XEN_SYS_HYPERVISOR=y
CONFIG_XEN_XENBUS_FRONTEND=y
CONFIG_SWIOTLB_XEN=y
CONFIG_XEN_TMEM=m
CONFIG_XEN_PRIVCMD=m
CONFIG_XEN_HAVE_PVMMU=y
CONFIG_STAGING=y
CONFIG_STAGING_MEDIA=y
CONFIG_NET_VENDOR_SILICOM=y
CONFIG_X86_PLATFORM_DEVICES=y
CONFIG_IDEAPAD_LAPTOP=m
CONFIG_INTEL_SMARTCONNECT=y
CONFIG_CHROME_PLATFORMS=y
CONFIG_CLKDEV_LOOKUP=y
CONFIG_HAVE_CLK_PREPARE=y
CONFIG_COMMON_CLK=y
CONFIG_CLKEVT_I8253=y
CONFIG_I8253_LOCK=y
CONFIG_CLKBLD_I8253=y
CONFIG_IOMMU_API=y
CONFIG_IOMMU_SUPPORT=y
CONFIG_AMD_IOMMU=y
CONFIG_DMAR_TABLE=y
CONFIG_INTEL_IOMMU=y
CONFIG_INTEL_IOMMU_FLOPPY_WA=y
CONFIG_IRQ_REMAP=y
CONFIG_MEMORY=y
CONFIG_RESET_CONTROLLER=y
CONFIG_GENERIC_PHY=y
CONFIG_POWERCAP=y
CONFIG_INTEL_RAPL=m
CONFIG_FIRMWARE_MEMMAP=y
CONFIG_DMIID=y
CONFIG_DMI_SCAN_MACHINE_NON_EFI_FALLBACK=y
CONFIG_ISCSI_IBFT_FIND=y
CONFIG_UEFI_CPER=y
CONFIG_DCACHE_WORD_ACCESS=y
CONFIG_EXT4_FS=m
CONFIG_EXT4_USE_FOR_EXT23=y
CONFIG_EXT4_FS_POSIX_ACL=y
CONFIG_EXT4_FS_SECURITY=y
CONFIG_JBD2=m
CONFIG_FS_MBCACHE=m
CONFIG_FS_POSIX_ACL=y
CONFIG_EXPORTFS=y
CONFIG_FILE_LOCKING=y
CONFIG_FSNOTIFY=y
CONFIG_DNOTIFY=y
CONFIG_INOTIFY_USER=y
CONFIG_FANOTIFY=y
CONFIG_FANOTIFY_ACCESS_PERMISSIONS=y
CONFIG_QUOTA=y
CONFIG_QUOTA_NETLINK_INTERFACE=y
CONFIG_QUOTACTL=y
CONFIG_QUOTACTL_COMPAT=y
CONFIG_AUTOFS4_FS=y
CONFIG_FUSE_FS=m
CONFIG_ISO9660_FS=m
CONFIG_UDF_FS=m
CONFIG_UDF_NLS=y
CONFIG_FAT_FS=m
CONFIG_MSDOS_FS=m
CONFIG_VFAT_FS=m
CONFIG_NTFS_FS=m
CONFIG_NTFS_RW=y
CONFIG_PROC_FS=y
CONFIG_PROC_SYSCTL=y
CONFIG_KERNFS=y
CONFIG_SYSFS=y
CONFIG_TMPFS=y
CONFIG_TMPFS_POSIX_ACL=y
CONFIG_TMPFS_XATTR=y
CONFIG_HUGETLBFS=y
CONFIG_HUGETLB_PAGE=y
CONFIG_CONFIGFS_FS=y
CONFIG_MISC_FILESYSTEMS=y
CONFIG_PSTORE=y
CONFIG_EFIVAR_FS=y
CONFIG_NETWORK_FILESYSTEMS=y
CONFIG_NLS=y
CONFIG_NLS_CODEPAGE_437=m
CONFIG_NLS_ISO8859_1=m
CONFIG_TRACE_IRQFLAGS_SUPPORT=y
CONFIG_PRINTK_TIME=y
CONFIG_DYNAMIC_DEBUG=y
CONFIG_ENABLE_WARN_DEPRECATED=y
CONFIG_STRIP_ASM_SYMS=y
CONFIG_UNUSED_SYMBOLS=y
CONFIG_DEBUG_FS=y
CONFIG_ARCH_WANT_FRAME_POINTERS=y
CONFIG_FRAME_POINTER=y
CONFIG_MAGIC_SYSRQ=y
CONFIG_DEBUG_KERNEL=y
CONFIG_HAVE_DEBUG_KMEMLEAK=y
CONFIG_DEBUG_MEMORY_INIT=y
CONFIG_HAVE_DEBUG_STACKOVERFLOW=y
CONFIG_HAVE_ARCH_KMEMCHECK=y
CONFIG_LOCKUP_DETECTOR=y
CONFIG_HARDLOCKUP_DETECTOR=y
CONFIG_DETECT_HUNG_TASK=y
CONFIG_SCHED_DEBUG=y
CONFIG_SCHEDSTATS=y
CONFIG_TIMER_STATS=y
CONFIG_STACKTRACE=y
CONFIG_DEBUG_BUGVERBOSE=y
CONFIG_DEBUG_LIST=y
CONFIG_ARCH_HAS_DEBUG_STRICT_USER_COPY_CHECKS=y
CONFIG_USER_STACKTRACE_SUPPORT=y
CONFIG_NOP_TRACER=y
CONFIG_HAVE_FUNCTION_TRACER=y
CONFIG_HAVE_FUNCTION_GRAPH_TRACER=y
CONFIG_HAVE_FUNCTION_GRAPH_FP_TEST=y
CONFIG_HAVE_FUNCTION_TRACE_MCOUNT_TEST=y
CONFIG_HAVE_DYNAMIC_FTRACE=y
CONFIG_HAVE_DYNAMIC_FTRACE_WITH_REGS=y
CONFIG_HAVE_FTRACE_MCOUNT_RECORD=y
CONFIG_HAVE_SYSCALL_TRACEPOINTS=y
CONFIG_HAVE_FENTRY=y
CONFIG_HAVE_C_RECORDMCOUNT=y
CONFIG_TRACER_MAX_TRACE=y
CONFIG_TRACE_CLOCK=y
CONFIG_RING_BUFFER=y
CONFIG_EVENT_TRACING=y
CONFIG_CONTEXT_SWITCH_TRACER=y
CONFIG_TRACING=y
CONFIG_GENERIC_TRACER=y
CONFIG_TRACING_SUPPORT=y
CONFIG_FTRACE=y
CONFIG_FUNCTION_TRACER=y
CONFIG_FUNCTION_GRAPH_TRACER=y
CONFIG_SCHED_TRACER=y
CONFIG_FTRACE_SYSCALLS=y
CONFIG_TRACER_SNAPSHOT=y
CONFIG_BRANCH_PROFILE_NONE=y
CONFIG_STACK_TRACER=y
CONFIG_BLK_DEV_IO_TRACE=y
CONFIG_KPROBE_EVENT=y
CONFIG_UPROBE_EVENT=y
CONFIG_PROBE_EVENTS=y
CONFIG_DYNAMIC_FTRACE=y
CONFIG_DYNAMIC_FTRACE_WITH_REGS=y
CONFIG_FUNCTION_PROFILER=y
CONFIG_FTRACE_MCOUNT_RECORD=y
CONFIG_MMIOTRACE=y
CONFIG_HAVE_ARCH_KGDB=y
CONFIG_STRICT_DEVMEM=y
CONFIG_X86_VERBOSE_BOOTUP=y
CONFIG_EARLY_PRINTK=y
CONFIG_EARLY_PRINTK_EFI=y
CONFIG_DOUBLEFAULT=y
CONFIG_HAVE_MMIOTRACE_SUPPORT=y
CONFIG_IO_DELAY_0X80=y
CONFIG_PAX_USERCOPY_SLABS=y
CONFIG_GRKERNSEC=y
CONFIG_GRKERNSEC_CONFIG_CUSTOM=y
CONFIG_PAX=y
CONFIG_PAX_SOFTMODE=y
CONFIG_PAX_EI_PAX=y
CONFIG_PAX_PT_PAX_FLAGS=y
CONFIG_PAX_XATTR_PAX_FLAGS=y
CONFIG_PAX_HAVE_ACL_FLAGS=y
CONFIG_PAX_NOEXEC=y
CONFIG_PAX_PAGEEXEC=y
CONFIG_PAX_EMUTRAMP=y
CONFIG_PAX_MPROTECT=y
CONFIG_PAX_MPROTECT_COMPAT=y
CONFIG_PAX_ELFRELOCS=y
CONFIG_PAX_ASLR=y
CONFIG_PAX_RANDKSTACK=y
CONFIG_PAX_RANDUSTACK=y
CONFIG_PAX_RANDMMAP=y
CONFIG_PAX_MEMORY_SANITIZE=y
CONFIG_PAX_MEMORY_STACKLEAK=y
CONFIG_PAX_MEMORY_STRUCTLEAK=y
CONFIG_PAX_REFCOUNT=y
CONFIG_PAX_USERCOPY=y
CONFIG_PAX_SIZE_OVERFLOW=y
CONFIG_PAX_LATENT_ENTROPY=y
CONFIG_GRKERNSEC_KMEM=y
CONFIG_GRKERNSEC_IO=y
CONFIG_GRKERNSEC_JIT_HARDEN=y
CONFIG_GRKERNSEC_PERF_HARDEN=y
CONFIG_GRKERNSEC_RAND_THREADSTACK=y
CONFIG_GRKERNSEC_PROC_MEMMAP=y
CONFIG_GRKERNSEC_KSTACKOVERFLOW=y
CONFIG_GRKERNSEC_BRUTE=y
CONFIG_GRKERNSEC_MODHARDEN=y
CONFIG_GRKERNSEC_HIDESYM=y
CONFIG_GRKERNSEC_RANDSTRUCT=y
CONFIG_GRKERNSEC_RANDSTRUCT_PERFORMANCE=y
CONFIG_GRKERNSEC_KERN_LOCKOUT=y
CONFIG_GRKERNSEC_NO_RBAC=y
CONFIG_GRKERNSEC_ACL_HIDEKERN=y
CONFIG_GRKERNSEC_PROC=y
CONFIG_GRKERNSEC_PROC_USER=y
CONFIG_GRKERNSEC_PROC_ADD=y
CONFIG_GRKERNSEC_LINK=y
CONFIG_GRKERNSEC_SYMLINKOWN=y
CONFIG_GRKERNSEC_FIFO=y
CONFIG_GRKERNSEC_SYSFS_RESTRICT=y
CONFIG_GRKERNSEC_ROFS=y
CONFIG_GRKERNSEC_DEVICE_SIDECHANNEL=y
CONFIG_GRKERNSEC_CHROOT=y
CONFIG_GRKERNSEC_CHROOT_MOUNT=y
CONFIG_GRKERNSEC_CHROOT_DOUBLE=y
CONFIG_GRKERNSEC_CHROOT_PIVOT=y
CONFIG_GRKERNSEC_CHROOT_CHDIR=y
CONFIG_GRKERNSEC_CHROOT_CHMOD=y
CONFIG_GRKERNSEC_CHROOT_FCHDIR=y
CONFIG_GRKERNSEC_CHROOT_MKNOD=y
CONFIG_GRKERNSEC_CHROOT_SHMAT=y
CONFIG_GRKERNSEC_CHROOT_UNIX=y
CONFIG_GRKERNSEC_CHROOT_FINDTASK=y
CONFIG_GRKERNSEC_CHROOT_NICE=y
CONFIG_GRKERNSEC_CHROOT_SYSCTL=y
CONFIG_GRKERNSEC_CHROOT_CAPS=y
CONFIG_GRKERNSEC_CHROOT_INITRD=y
CONFIG_GRKERNSEC_AUDIT_GROUP=y
CONFIG_GRKERNSEC_EXECLOG=y
CONFIG_GRKERNSEC_RESLOG=y
CONFIG_GRKERNSEC_CHROOT_EXECLOG=y
CONFIG_GRKERNSEC_AUDIT_PTRACE=y
CONFIG_GRKERNSEC_AUDIT_CHDIR=y
CONFIG_GRKERNSEC_AUDIT_MOUNT=y
CONFIG_GRKERNSEC_SIGNAL=y
CONFIG_GRKERNSEC_FORKFAIL=y
CONFIG_GRKERNSEC_TIME=y
CONFIG_GRKERNSEC_PROC_IPADDR=y
CONFIG_GRKERNSEC_RWXMAP_LOG=y
CONFIG_GRKERNSEC_DMESG=y
CONFIG_GRKERNSEC_HARDEN_PTRACE=y
CONFIG_GRKERNSEC_PTRACE_READEXEC=y
CONFIG_GRKERNSEC_SETXID=y
CONFIG_GRKERNSEC_HARDEN_IPC=y
CONFIG_GRKERNSEC_TPE=y
CONFIG_GRKERNSEC_RANDNET=y
CONFIG_GRKERNSEC_BLACKHOLE=y
CONFIG_GRKERNSEC_NO_SIMULT_CONNECT=y
CONFIG_GRKERNSEC_SOCKET=y
CONFIG_GRKERNSEC_SOCKET_ALL=y
CONFIG_GRKERNSEC_SOCKET_CLIENT=y
CONFIG_GRKERNSEC_SOCKET_SERVER=y
CONFIG_GRKERNSEC_DENYUSB=y
CONFIG_GRKERNSEC_SYSCTL=y
CONFIG_GRKERNSEC_SYSCTL_DISTRO=y
CONFIG_GRKERNSEC_SYSCTL_ON=y
CONFIG_KEYS=y
CONFIG_PERSISTENT_KEYRINGS=y
CONFIG_BIG_KEYS=y
CONFIG_SECURITY=y
CONFIG_SECURITYFS=y
CONFIG_SECURITY_PATH=y
CONFIG_DEFAULT_SECURITY_DAC=y
CONFIG_CRYPTO=y
CONFIG_CRYPTO_ALGAPI=y
CONFIG_CRYPTO_ALGAPI2=y
CONFIG_CRYPTO_AEAD=m
CONFIG_CRYPTO_AEAD2=y
CONFIG_CRYPTO_BLKCIPHER=m
CONFIG_CRYPTO_BLKCIPHER2=y
CONFIG_CRYPTO_HASH=y
CONFIG_CRYPTO_HASH2=y
CONFIG_CRYPTO_RNG=m
CONFIG_CRYPTO_RNG2=y
CONFIG_CRYPTO_PCOMP2=y
CONFIG_CRYPTO_MANAGER=m
CONFIG_CRYPTO_MANAGER2=y
CONFIG_CRYPTO_MANAGER_DISABLE_TESTS=y
CONFIG_CRYPTO_GF128MUL=m
CONFIG_CRYPTO_WORKQUEUE=y
CONFIG_CRYPTO_CRYPTD=m
CONFIG_CRYPTO_ABLK_HELPER=m
CONFIG_CRYPTO_GLUE_HELPER_X86=m
CONFIG_CRYPTO_CCM=m
CONFIG_CRYPTO_SEQIV=m
CONFIG_CRYPTO_CBC=m
CONFIG_CRYPTO_CTR=m
CONFIG_CRYPTO_ECB=m
CONFIG_CRYPTO_LRW=m
CONFIG_CRYPTO_XTS=m
CONFIG_CRYPTO_CRC32C=m
CONFIG_CRYPTO_CRC32C_INTEL=m
CONFIG_CRYPTO_CRC32_PCLMUL=m
CONFIG_CRYPTO_CRCT10DIF=m
CONFIG_CRYPTO_CRCT10DIF_PCLMUL=m
CONFIG_CRYPTO_SHA256=y
CONFIG_CRYPTO_GHASH_CLMUL_NI_INTEL=m
CONFIG_CRYPTO_AES=y
CONFIG_CRYPTO_AES_X86_64=m
CONFIG_CRYPTO_AES_NI_INTEL=m
CONFIG_CRYPTO_ARC4=m
CONFIG_CRYPTO_LZO=y
CONFIG_CRYPTO_USER_API=m
CONFIG_CRYPTO_USER_API_SKCIPHER=m
CONFIG_CRYPTO_HW=y
CONFIG_CRYPTO_DEV_CCP=y
CONFIG_HAVE_KVM=y
CONFIG_HAVE_KVM_IRQCHIP=y
CONFIG_HAVE_KVM_IRQ_ROUTING=y
CONFIG_HAVE_KVM_EVENTFD=y
CONFIG_KVM_APIC_ARCHITECTURE=y
CONFIG_KVM_MMIO=y
CONFIG_KVM_ASYNC_PF=y
CONFIG_HAVE_KVM_MSI=y
CONFIG_HAVE_KVM_CPU_RELAX_INTERCEPT=y
CONFIG_KVM_VFIO=y
CONFIG_VIRTUALIZATION=y
CONFIG_KVM=m
CONFIG_KVM_INTEL=m
CONFIG_KVM_MMU_AUDIT=y
CONFIG_KVM_DEVICE_ASSIGNMENT=y
CONFIG_BINARY_PRINTF=y
CONFIG_BITREVERSE=y
CONFIG_GENERIC_STRNCPY_FROM_USER=y
CONFIG_GENERIC_STRNLEN_USER=y
CONFIG_GENERIC_NET_UTILS=y
CONFIG_GENERIC_FIND_FIRST_BIT=y
CONFIG_GENERIC_PCI_IOMAP=y
CONFIG_GENERIC_IOMAP=y
CONFIG_GENERIC_IO=y
CONFIG_PERCPU_RWSEM=y
CONFIG_ARCH_USE_CMPXCHG_LOCKREF=y
CONFIG_CRC16=m
CONFIG_CRC_T10DIF=m
CONFIG_CRC_ITU_T=m
CONFIG_CRC32=y
CONFIG_CRC32_SLICEBY8=y
CONFIG_ZLIB_INFLATE=y
CONFIG_ZLIB_DEFLATE=y
CONFIG_LZO_COMPRESS=y
CONFIG_LZO_DECOMPRESS=y
CONFIG_LZ4_DECOMPRESS=y
CONFIG_XZ_DEC=y
CONFIG_XZ_DEC_X86=y
CONFIG_XZ_DEC_POWERPC=y
CONFIG_XZ_DEC_IA64=y
CONFIG_XZ_DEC_ARM=y
CONFIG_XZ_DEC_ARMTHUMB=y
CONFIG_XZ_DEC_SPARC=y
CONFIG_XZ_DEC_BCJ=y
CONFIG_DECOMPRESS_GZIP=y
CONFIG_DECOMPRESS_BZIP2=y
CONFIG_DECOMPRESS_LZMA=y
CONFIG_DECOMPRESS_XZ=y
CONFIG_DECOMPRESS_LZO=y
CONFIG_DECOMPRESS_LZ4=y
CONFIG_GENERIC_ALLOCATOR=y
CONFIG_ASSOCIATIVE_ARRAY=y
CONFIG_HAS_IOMEM=y
CONFIG_HAS_IOPORT_MAP=y
CONFIG_HAS_DMA=y
CONFIG_CHECK_SIGNATURE=y
CONFIG_CPU_RMAP=y
CONFIG_DQL=y
CONFIG_NLATTR=y
CONFIG_ARCH_HAS_ATOMIC64_DEC_IF_POSITIVE=y
CONFIG_AVERAGE=y
CONFIG_DDR=y
CONFIG_UCS2_STRING=y
CONFIG_FONT_SUPPORT=y
CONFIG_FONTS=y
CONFIG_FONT_8x16=y
CONFIG_FONT_AUTOSELECT=y

Re: grsec denies X session

PostPosted: Thu Aug 21, 2014 5:58 pm
by spender
Very odd -- can you remove the "if (sub_info->path[0] == '\0')" condition, replacing it with:
Code: Select all
printk(KERN_ALERT "sub_info->path buf: %02x\n", sub_info->path[0]);

and leave the dump_stack() call in?

Thanks,
-Brad

Re: grsec denies X session

PostPosted: Thu Aug 21, 2014 10:09 pm
by ice9
I changed that line of code as requested.

Code: Select all
[   99.032977] traps: gnome-shell[673] trap int3 ip:79cef609d993 sp:7c46f8fa4800 error:0
[   99.447346] traps: gnome-shell[705] trap int3 ip:6b1b77d43993 sp:7663a3367090 error:0
[  101.890317] grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/VBoxClient[VBoxClient:913] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/VBoxClient-all[VBoxClient-all:749] uid/euid:1000/1000 gid/egid:1000/1000
[  101.896161] grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/VBoxClient[VBoxClient:917] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/VBoxClient-all[VBoxClient-all:749] uid/euid:1000/1000 gid/egid:1000/1000
[  101.900459] grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/VBoxClient[VBoxClient:922] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/VBoxClient-all[VBoxClient-all:749] uid/euid:1000/1000 gid/egid:1000/1000
[  101.907013] grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/VBoxClient[VBoxClient:930] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/VBoxClient-all[VBoxClient-all:749] uid/euid:1000/1000 gid/egid:1000/1000
[  101.910941] grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/VBoxClient[VBoxClient:935] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/VBoxClient-all[VBoxClient-all:749] uid/euid:1000/1000 gid/egid:1000/1000


Code: Select all
Aug 22 02:40:22 Computer kernel: sub_info->path buf: 00
Aug 22 02:40:22 Computer kernel: CPU: 1 PID: 25664 Comm: kworker/u16:0 Not tainted 3.15.10.201408140023-1-ARCH #1
Aug 22 02:40:22 Computer kernel: Hardware name: LENOVO 20236/INVALID, BIOS 78CN25WW(V2.03) 11/19/2013
Aug 22 02:40:22 Computer kernel:  0000000000000002 b5070c7f9b03b6f7 0000000000000000 ffff8800c5b7e088
Aug 22 02:40:22 Computer kernel:  ffffc9001af93ef0 ffffffff8155ac74 ffff8800c5b7e088 ffffc9001af93f20
Aug 22 02:40:22 Computer kernel:  ffffffff8108bf03 ffff8801297c0000 ffff8800c5b7e088 0000000000000000
Aug 22 02:40:22 Computer kernel: Call Trace:
Aug 22 02:40:22 Computer kernel:  [<ffffffff8155ac74>] dump_stack+0x4d/0x7b
Aug 22 02:40:22 Computer kernel:  [<ffffffff8108bf03>] ____call_usermodehelper+0x213/0x240
Aug 22 02:40:22 Computer kernel:  [<ffffffff8108bf55>] call_helper+0x25/0x30
Aug 22 02:40:22 Computer kernel:  [<ffffffff8108bf30>] ? ____call_usermodehelper+0x240/0x240
Aug 22 02:40:22 Computer kernel:  [<ffffffff81569824>] ret_from_fork+0x74/0xa0
Aug 22 02:40:22 Computer kernel:  [<ffffffff8108bf30>] ? ____call_usermodehelper+0x240/0x240
Aug 22 02:40:22 Computer kernel: grsec: denied exec of usermode helper binary  located outside of /sbin and system library paths
Aug 22 02:40:23 Computer kernel: sub_info->path buf: 00
Aug 22 02:40:23 Computer kernel: CPU: 3 PID: 25665 Comm: kworker/u16:0 Not tainted 3.15.10.201408140023-1-ARCH #1
Aug 22 02:40:23 Computer kernel: Hardware name: LENOVO 20236/INVALID, BIOS 78CN25WW(V2.03) 11/19/2013
Aug 22 02:40:23 Computer kernel:  0000000000000002 f5a5d55d5f88422b 0000000000000000 ffff8800cbb36660
Aug 22 02:40:23 Computer kernel:  ffffc9001af9bef0 ffffffff8155ac74 ffff8800cbb36660 ffffc9001af9bf20
Aug 22 02:40:23 Computer kernel:  ffffffff8108bf03 ffff8801297c16a0 ffff8800cbb36660 0000000000000000
Aug 22 02:40:23 Computer kernel: Call Trace:
Aug 22 02:40:23 Computer kernel:  [<ffffffff8155ac74>] dump_stack+0x4d/0x7b
Aug 22 02:40:23 Computer kernel:  [<ffffffff8108bf03>] ____call_usermodehelper+0x213/0x240
Aug 22 02:40:23 Computer kernel:  [<ffffffff8108bf55>] call_helper+0x25/0x30
Aug 22 02:40:23 Computer kernel:  [<ffffffff8108bf30>] ? ____call_usermodehelper+0x240/0x240
Aug 22 02:40:23 Computer kernel:  [<ffffffff81569824>] ret_from_fork+0x74/0xa0
Aug 22 02:40:23 Computer kernel:  [<ffffffff8108bf30>] ? ____call_usermodehelper+0x240/0x240


Xorg.log
Code: Select all
xf86EnableIOPorts: failed to set IOPL for I/O (No such device)


And I can still startx by 'root' normally.

Btw: I have tried an older linux-grsec kernel from the repos and it did panic like the screenshot in the other post.

Re: grsec denies X session

PostPosted: Thu Aug 21, 2014 10:28 pm
by spender
Are you using any third-party modules? I can't see a codepath that would result in an empty path -- can you apply the following patch as well?

https://grsecurity.net/~spender/umh_debug2.diff

Thanks,
-Brad

Re: grsec denies X session

PostPosted: Thu Aug 21, 2014 11:11 pm
by ice9
No I'm not using 3rd party modules, just the kernel source from the repository and 'localmodconfig'.

https://gist.github.com/anonymous/7387a71708dfc2b882b0

Re: grsec denies X session

PostPosted: Thu Aug 21, 2014 11:59 pm
by spender
Thanks, I've tracked down the source of that log and have fixed it for the next patches (not the ones released tonight).

As for the X problem, does it work fine when CONFIG_GRKERNSEC_IO is disabled?

Thanks,
-Brad

Re: grsec denies X session

PostPosted: Fri Aug 22, 2014 8:58 am
by ice9
I'm glad that you have fixed it and thank you so much for your help.
It didn't work as well after disabling CONFIG_GRKERNSEC_IO.

What was the issue here?

Re: grsec denies X session

PostPosted: Thu Dec 11, 2014 8:37 am
by vivo
for me the problem was triggered not by grsec or pax, because kdm was not working also for a vanilla kernel.
actually is /usr/lib64/kde4/libexec/kdm_config which has some problem possibly with an hardened gcc.
It's not trivial to debug because "This program is part of kdm and should not be run manually." so I've simply switched to lightdm