grsecurity forums

Posted: **Tue Jan 27, 2004 11:11 am**

Hi there!

I was facing the same problem a while back running the 2.4.20 kernel and had to switch back to a non-grsec kernel in order to fix the problem (see here: http://forums.grsecurity.net/viewtopic.php?t=424&highlight=segmentation+fault).

Again, but this time running the latest grsec 1.9.13 under linux 2.4.24, I am facing the same problem: When compiling the linux-kernel, the compilation aborts randomly with a segmentation fault. Sometimes compiling goes very far, sometimes it stops just after the first few seconds.

ANY HELP APPRECIATED! I don't want to run a non-grsec kernel anymore...

Here is my grsec-config:

#
# Grsecurity
#
CONFIG_GRKERNSEC=y
CONFIG_CRYPTO=y
CONFIG_CRYPTO_SHA256=y
# CONFIG_GRKERNSEC_LOW is not set
# CONFIG_GRKERNSEC_MID is not set
# CONFIG_GRKERNSEC_HI is not set
CONFIG_GRKERNSEC_CUSTOM=y

#
# Address Space Protection
#
# CONFIG_GRKERNSEC_PAX_NOEXEC is not set
# CONFIG_GRKERNSEC_PAX_KERNEXEC is not set
CONFIG_GRKERNSEC_PAX_ASLR=y
CONFIG_GRKERNSEC_PAX_RANDKSTACK=y
CONFIG_GRKERNSEC_PAX_RANDUSTACK=y
CONFIG_GRKERNSEC_PAX_RANDMMAP=y
CONFIG_GRKERNSEC_KMEM=y
# CONFIG_GRKERNSEC_IO is not set
# CONFIG_GRKERNSEC_PROC_MEMMAP is not set
# CONFIG_GRKERNSEC_HIDESYM is not set

#
# ACL options
#
# CONFIG_GRKERNSEC_ACL_HIDEKERN is not set
CONFIG_GRKERNSEC_ACL_MAXTRIES=3
CONFIG_GRKERNSEC_ACL_TIMEOUT=30

#
# Filesystem Protections
#
# CONFIG_GRKERNSEC_PROC is not set
# CONFIG_GRKERNSEC_LINK is not set
# CONFIG_GRKERNSEC_FIFO is not set
# CONFIG_GRKERNSEC_CHROOT is not set

#
# Kernel Auditing
#
# CONFIG_GRKERNSEC_AUDIT_GROUP is not set
# CONFIG_GRKERNSEC_EXECLOG is not set
# CONFIG_GRKERNSEC_RESLOG is not set
# CONFIG_GRKERNSEC_CHROOT_EXECLOG is not set
# CONFIG_GRKERNSEC_AUDIT_CHDIR is not set
# CONFIG_GRKERNSEC_AUDIT_MOUNT is not set
# CONFIG_GRKERNSEC_AUDIT_IPC is not set
# CONFIG_GRKERNSEC_SIGNAL is not set
# CONFIG_GRKERNSEC_FORKFAIL is not set
# CONFIG_GRKERNSEC_TIME is not set

#
# Executable Protections
#
# CONFIG_GRKERNSEC_EXECVE is not set
# CONFIG_GRKERNSEC_DMESG is not set
CONFIG_GRKERNSEC_RANDPID=y
# CONFIG_GRKERNSEC_TPE is not set

#
# Network Protections
#
CONFIG_GRKERNSEC_RANDNET=y
CONFIG_GRKERNSEC_RANDISN=y
CONFIG_GRKERNSEC_RANDID=y
CONFIG_GRKERNSEC_RANDSRC=y
CONFIG_GRKERNSEC_RANDRPC=y
# CONFIG_GRKERNSEC_SOCKET is not set

#
# Sysctl support
#
# CONFIG_GRKERNSEC_SYSCTL is not set

#
# Logging options
#
CONFIG_GRKERNSEC_FLOODTIME=10
CONFIG_GRKERNSEC_FLOODBURST=4

Thanks!

Sincerely,
Habermas

Posted: **Thu Jan 29, 2004 7:03 am**

Habermas wrote:Again, but this time running the latest grsec 1.9.13 under linux 2.4.24, I am facing the same problem: When compiling the linux-kernel, the compilation aborts randomly with a segmentation fault. Sometimes compiling goes very far, sometimes it stops just after the first few seconds.

can you turn off all the PaX randomization options and try again? if that helps, try to enable them one by one and see at which point the problem appears. if that doesn't help, then i don't have many ideas besides doing proper debugging (enable coredumping then take a look at the coredumps in gdb and see what exactly crashed).

grsecurity forums

Segmentation faults while compiling kernel

Segmentation faults while compiling kernel

Re: Segmentation faults while compiling kernel