grsecurity reload renders machine unresponsive

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

grsecurity reload renders machine unresponsive

Postby Dwokfur » Wed Nov 27, 2013 2:33 pm

I've recently upgraded to hardened-sources-3.11.9-r1 (incorporates grsecurity-3.0-3.11.9-201311242034) and started using gradm-3.0-201311242038. After booting the new kernel, the policy gets loaded and I can authenticate myself as an admin. However upon issuing a policy reload, the machine becomes unresponsive. Including no reactions to SysRq. Unfortunately there are no kernel log messages related to the event. I can only see new log entries after it comes back.

Any known issues or suggestions related to the symptom?

Thx: Dw.
Dwokfur
 
Posts: 99
Joined: Tue Jun 08, 2004 10:07 am

Re: grsecurity reload renders machine unresponsive

Postby PaX Team » Wed Nov 27, 2013 3:24 pm

update to the latest grsec patch (by hand for now) as it fixes a few problems with the new atomic reload code.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: grsecurity reload renders machine unresponsive

Postby Dwokfur » Fri Dec 13, 2013 10:58 pm

gradm-3.0 using hardened-sources-3.12.4 containing an upgraded grsecurity patch solved the problem.
Policy can be reloaded properly without a crash and prior user mode helper log messages have also gone (related to some openrc shell scripts).
I test the kernel a bit more.

Thanks: Dw.
Dwokfur
 
Posts: 99
Joined: Tue Jun 08, 2004 10:07 am


Return to grsecurity support