grsecurity forums

by **Peter** » Sun Apr 11, 2004 11:15 am

Hi folks!

Made I something wrong?

rm /etc/grsec/learning;
rm /etc/grsec/test;
gradm -F -L /etc/grsec/learning;
gradm -D;
gradm -F -L /etc/grsec/learning -O /etc/grsec/test;

After some time:
calloc: Cannot allocate memory

Some more infos:

Code: Select all: # uname -a Linux xxx 2.4.23-grsec #4 SMP Sat Jan 17 12:04:31 UTC 2004 i686 unknown unknown GNU/Linux # free total used free shared buffers cached Mem: 2068796 2014676 54120 0 93752 1685340 -/+ buffers/cache: 235584 1833212 Swap: 987988 2956 985032 # # ls -la learning -rw------- 1 root root 318972600 Apr 11 14:37 learning # ls -la test -rw-r----- 1 root root 0 Apr 11 14:38 test #

Seem so I need a little more RAM for my learning log.
I am right?

Viele Gruesse,
Peter.

by **spender** » Sun Apr 11, 2004 2:48 pm

how long did you have the learning mode running?
that's a 300mb log you have there...

-Brad

by **fwiffo** » Mon Apr 12, 2004 5:38 am

mine post is useless, but at least I can say LOL!
300Mb is REALLY a lot!

by **Sleight of Mind** » Mon Apr 12, 2004 9:24 am

fwiffo please stop making useless and retarded posts on this forum. Try something like forums.spammersheaven.com if you want to make stupid posts.

by **Peter** » Mon Apr 12, 2004 11:24 am

spender wrote:how long did you have the learning mode running?
that's a 300mb log you have there...

-Brad

I do not really remember.
About 1 or 2 days or so!?

It is a 2,xGhz P4, 2GByte Ram, Crux-System with grsec and 160GB-RAID.
apache, qmail, mysql, tinydns,... and about 300 vhost-webhosting-server.

So, perhaps you mean 300mb is too much?
Okay, then I will learn a little bit shorter.

Thank you for your time!

by **argan0n** » Wed Apr 14, 2004 7:14 pm

Peter:

You may be able to shorten the raw learning file by grepping out things like UPDATEDB/LOCATE and similar file system intensive activites that happen over night. Then hand tweak an ACL for what you removed.
Perhaps you could also kill all the memory hungery processes during the parsing phase of the learning mode (not the initial one of course). Do you have swap enabled on this machine?

by **Peter** » Thu Apr 15, 2004 2:18 am

argan0n wrote: Do you have swap enabled on this machine?

Yes, have a look at the top "free".

I saw that mine Apache generates for every php-call a tmp-file into /tmp and so the learning-log grows "a little bit".

by **fwiffo** » Fri Apr 16, 2004 7:17 pm

Sleight of Mind wrote:fwiffo please stop making useless and retarded posts on this forum. Try something like forums.spammersheaven.com if you want to make stupid posts.

Mine post was useless, but also your is, I was only expressing the fact that 300 is really a lot, and I don't see anything stupid in that, but if you consider that stupid, then you must have a problem.
If you also consider that I already said in the post that was useless, then you must have 2 problems, one for not considering that maybe you know absolutely nothing of me, and instead of asking politely to stop you've begun taking conclusions (even if I REALLY don't see a reason why something I wrote in the past, other than this post *that I still don't recognize as stupid*, should be considered as you said), second for insulting people that are only here to read, learn and maybe (in the limits of possible), help. First of all I consider all of this FUN, because I love computers/programming/security related arguments.
If you wanted to start a flame, maybe you've done the right thing.
I'm repeating myself, but I see it necessary: Don't insult people and/or make misjudgements on what you see, because I see it unnecessary to do so.
Now, please, since you're all-this-serious, let's go back to the original post....