Broken /proc/stat

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Broken /proc/stat

Postby linkfanel » Mon May 30, 2011 3:56 pm

Using linux 2.6.39 and grsecurity-2.2.2-2.6.39-201105251736.patch, CPU usage times reported in /proc/stat seem a bit off... A sample line:

cpu 22602 0 0 0 0 209909 0 0 0 0

top reports 100% in hi when the system should be idle. That's on i386; it seems to work fine on my 64 bit machine.
linkfanel
 
Posts: 39
Joined: Fri Jul 14, 2006 8:26 pm

Re: Broken /proc/stat

Postby spender » Mon May 30, 2011 9:42 pm

I'm not able to reproduce this on either i386 or amd64. Have you tried a vanilla kernel?

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Re: Broken /proc/stat

Postby linkfanel » Mon May 30, 2011 11:29 pm

Yes, it works fine with a vanilla kernel. Here's my .config: http://www.linkfanel.net/stuff/config-2.6.39-grsec
linkfanel
 
Posts: 39
Joined: Fri Jul 14, 2006 8:26 pm

Re: Broken /proc/stat

Postby spender » Tue May 31, 2011 7:51 am

Can you link to the vanilla config as well? Enabling grsecurity toggles some vanilla kernel config settings, so I'd want to make sure it wasn't due to one of those. I'll give it a look tonight. In the meantime, you could also try a binary search to find the problematic option if grsec is at fault.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Re: Broken /proc/stat

Postby linkfanel » Tue May 31, 2011 5:59 pm

Vanilla config: http://www.linkfanel.net/stuff/config-2.6.39
The problem happens even with grsecurity disabled altogether.
linkfanel
 
Posts: 39
Joined: Fri Jul 14, 2006 8:26 pm

Re: Broken /proc/stat

Postby spender » Tue May 31, 2011 8:55 pm

Can you test a kernel with just the latest PaX patch applied?

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Re: Broken /proc/stat

Postby linkfanel » Tue May 31, 2011 9:46 pm

I tested a kernel with just the PaX patch, and PaX disabled, but the problem is still there.
linkfanel
 
Posts: 39
Joined: Fri Jul 14, 2006 8:26 pm

Re: Broken /proc/stat

Postby PaX Team » Wed Jun 01, 2011 12:37 pm

linkfanel wrote:I tested a kernel with just the PaX patch, and PaX disabled, but the problem is still there.
can you disable CGROUPS and tell me if you still see the problem? (mind you, stat/top are fine here even with the CGROUPS options enabled) also, does anyone else have this problem?
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: Broken /proc/stat

Postby linkfanel » Wed Jun 01, 2011 2:31 pm

Yes, I disabled CGROUPS and the problem is still there.
linkfanel
 
Posts: 39
Joined: Fri Jul 14, 2006 8:26 pm

Re: Broken /proc/stat

Postby PaX Team » Wed Jul 06, 2011 1:41 pm

the latest patches should fix the issue.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: Broken /proc/stat

Postby linkfanel » Sun Jul 10, 2011 8:59 pm

Yes, this issue is fixed. Thanks!
linkfanel
 
Posts: 39
Joined: Fri Jul 14, 2006 8:26 pm


Return to grsecurity support