grsecurity forums

kernel: Unable to handle kernel paging request at virtual address 3ce70c86
kernel: printing eip:
kernel: c013402e
kernel: *pde = 00000000
kernel: Oops: 0000
kernel: CPU: 0
kernel: EIP: 0010:[_text_lock_mmap+131/261] Not tainted
kernel: EIP: 0010:[<c013402e>] Not tainted
kernel: EFLAGS: 00010286
kernel: eax: 3ce70c6a ebx: c1277640 ecx: c0686e80 edx: c0267768
kernel: esi: 000001d0 edi: 00000002 ebp: 00001bcf esp: d3fc7f20
kernel: ds: 0018 es: 0018 ss: 0018
kernel: Process kswapd (pid: 4, stackpage=d3fc7000)
kernel: Stack: 000001d0 c1277640 c012ba45 c1277640 000001d0 00000000 d3fc6000 00000200
kernel: 000001d0 c0267768 c1507330 cbf1d000 c1505b10 00000000 00000020 000001d0
kernel: 00000006 00000020 c012bc72 00000006 00000005 c0267768 00000006 000001d0
kernel: Call Trace: [gr_check_hidden_file+261/1504] [gr_check_hidden_file+818/1504] [gr_check_hidden_file+924/1504] [gr_check_hidden_file+1089/1504] [gr_check_hidden_file+1206/1504]
kernel: Call Trace: [<c012ba45>] [<c012bc72>] [<c012bcdc>] [<c012bd81>] [<c012bdf6>]
kernel: [gr_check_create+17/1056] [gr_check_hidden_file+1360/1504] [_stext+0/96] [show_regs+38/240] [gr_check_hidden_file+1360/1504]
kernel: [<c012bf31>] [<c012be90>] [<c0105000>] [<c0105726>] [<c012be90>]
kernel:
kernel: Code: 8b 40 1c 85 c0 74 0f 56 53 ff d0 59 85 c0 5a 75 05 5b 31 c0

Can You write the versions? /kernel, gradm.../.

If You turn off the acl subsystem, the problem is exist?

If the gradm isn't never, then You must upgrade. It contained some bug for acl.
/My English is very bad, sorry/

linux 2.4.18 grsecurity 1.9.4 wit NO acl subsystem this error is happend for 2 time at 4.00am and at this time crond execute tripwire for checking system changes...
i don't know if it is related to grsecurity but :

/
kernel: Call Trace: [gr_check_hidden_file+261/1504] [gr_check_hidden_file+818/1504] [gr_check_hidden_file+924/1504] [gr_check_hidden_file+1089/1504] [gr_check_hidden_file+1206/1504]
kernel: Call Trace: [<c012ba45>] [<c012bc72>] [<c012bcdc>] [<c012bd81>] [<c012bdf6>]
kernel: [gr_check_create+17/1056] [gr_check_hidden_file+1360/1504] [_stext+0/96] [show_regs+38/240] [gr_check_hidden_file+1360/1504]
/

gr_*** sounds like something like grsecurity functions... or not?(i'm not a developer)

do you have the acl system compiled in? It looks as though you do. the 1.9.4 acl system is still pretty flaky on some systems. The problems will be fixed in 1.9.5. the 1.9.4 acl system runs code in some places even if the acl system is not enabled.

-Brad

no acl was not compiled, watching into the patch-file i can see:
int gr_check_hidden_file(struct dentry *dentry, struct vfsmount *mnt)
+{
+ /* This has to be done a little differently than a normal search.
+ * If a file "allows" hidden access it is hidden, and thus requires
+ * a process that has hidden file access capabilities to access it.
+ * If the file acl denies hidden access/has no acl then no proc acl
+ * check is needed*/
what exactly do this function?

i just checked the patch, and the only way the gr_check_hidden_* functions can be called is if the ACL system is compiled in. If you don't compile it in, you won't have those problems. Again, 1.9.5 will fix all of this.

-Brad