grsecurity forums

Hi folks,

I have just installed grsecurity on my server. So far it has been running great, but: the second hard drive I installed today does not work. Using a vanilla kernel it works flawlessly.

The base kernel I use is 2.4.22 (vanilla), the only patch applied is grsecurity (version 1,9.12), and the system is a debian-woody. I made two kernel versions: one with grsec, one without. That's the only difference (I diff'd the .config-Files to make sure). The kernel options are: grsecurity enabled, high security level.

While the "normal" kernel boots just fine and the second hard drive (hdc) works, the grsecurity-enabled kernel produces the output below; note the IO errors. Any ideas, anyone?

Regards,
Kalessin

-------------------------------------------------snip!-------------------------------------------------
Uniform Multi-Platform E-IDE driver Revision: 7.00beta4-2.4
ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
NFORCE: IDE controller at PCI slot 00:09.0
NFORCE: chipset revision 195
NFORCE: not 100% native mode: will probe irqs later
AMD_IDE: Bios didn't set cable bits corectly. Enabling workaround.
AMD_IDE: Bios didn't set cable bits corectly. Enabling workaround.
AMD_IDE: nVidia Corporation nForce IDE (rev c3) UDMA100 controller on pci00:09.0 ide0: BM-DMA at 0xe800-0xe807, BIOS settings: hda:DMA, hdb:pio
ide1: BM-DMA at 0xe808-0xe80f, BIOS settings: hdc:DMA, hdd:DMA
hda: IC35L040AVVA07-0, ATA DISK drive
hdc: WDC WD400EB-00CPF0, ATA DISK drive
hdd: HL-DT-STDVD-ROM GDR8160B, ATAPI CD/DVD-ROM drive
ide0 at 0x1f0-0x1f7,0x3f6 on irq 14
ide1 at 0x170-0x177,0x376 on irq 15
hda: attached ide-disk driver.
hda: host protected area => 1
hda: 80418240 sectors (41174 MB) w/1863KiB Cache, CHS=5005/255/63
Partition check:
/dev/ide/host0/bus0/target0/lun0: p1 p2 < p5 p6 p7 >
hdc:end_request: I/O error, dev 16:00 (hdc), sector 0
end_request: I/O error, dev 16:00 (hdc), sector 2
end_request: I/O error, dev 16:00 (hdc), sector 4
end_request: I/O error, dev 16:00 (hdc), sector 6
end_request: I/O error, dev 16:00 (hdc), sector 0
end_request: I/O error, dev 16:00 (hdc), sector 2
end_request: I/O error, dev 16:00 (hdc), sector 4
end_request: I/O error, dev 16:00 (hdc), sector 6
-------------------------------------------------snip!-------------------------------------------------

Ok, problem solved. I am almost too embarrassed to tell... I had forgotten about an old ide-scsi entry in my lilo.conf... *ahem*. As a puzzle remains the strange fact that the unpatched kernel does not show a problem. The patched version (even with grsecurity switched off) does. Of course the behaviour of the latter is not really a bug, but merely a too-stupid sys admin

Regards,
Kalessin