grsecurity forums

After the oops, only a reboot gets all the things back to normal again :( I would greatly appreciate any suggestion on how the isolate the issue. Thank you.

/ {
/ rwx
/dev/mem r
/dev/kmem r
/bin rx
/sbin rx
/lib rx
/usr/lib rx
/usr/lib/courier-imap/var/authdaemon/ rwx
/usr/bin rx
/usr/sbin rx
/etc rx
/boot r
/etc/grsec h
/usr/X11R6/bin rx
/kit rx
/tftpboot rx
-CAP_SYS_RAWIO
-CAP_SYS_MODULE
}

<1>Unable to handle kernel paging request at virtual address bc13aaecAug 2 11:49:53 mach2 printing eip: c02c9239
*pde = 00000000
Oops: 0000
CPU: 0
EIP: 0010:[gr_check_create+329/672] Not tainted
EFLAGS: 00010202
eax: 00000003 ebx: c9962670 ecx: ffffffff edx: bc13aaec
esi: bc13aaec edi: c7d5cfe4 ebp: c7d5cfe4 esp: c7d7df0c
ds: 0018 es: 0018 ss: 0018
Process imapd (pid: 630, stackpage=c7d7d000)
Stack: 00000000 c7d7dfa4 000001c0 caaac2c0 bc13aaec c7d7dfac 00000000
00000034
c9962400 00000034 c7d5c000 00000004 0004dfac c013ee9c caaac2c0
cb773bc0
c14063c0 00000004 c7d7c000 001dfd64 bff2fb64 bff2fa7c c7d7dfa4
cd43b000
Call Trace: [sys_mkdir+140/528] [sys_rt_sigaction+152/320] [system_call+51/56]
Code: ac ae 75 08 84 c0 75 f8 31 c0 eb 04 19 c0 0c 01 85 c0 75 c8

It happens when logging in to the imap server fails (eg incorrect password). As you can imagine, this is VERY annoying. Please help :(

removing the /etc rx acl eliminates the crashes. now i wonder what could be the problem - does imapd try to write to /etc? i tried smth very simple: ls -lR /etc before and after, no changes.