grsecurity forums

by **forsaken** » Tue May 18, 2004 3:07 am

Hi,

is there a patch for 2.6.6 in the works, its been out a little while now.

Cheers.

by **c0ldbyte** » Tue May 18, 2004 9:02 am

Just stick with your 2.6.5 and stop whining and wait for a new version to be put out, There doing a good enough job as it is with the development of the 2.6 series as it is without being harrased by ppl that absolutley have to have the brand newest shit all the time when they absolutley dont need it for any other reason than there own selfishness.

by **dogmeat** » Tue May 18, 2004 7:26 pm

Actualy, ive seen quite a difference between 2.6.5 and 2.6.6 performence wise.

*shrug* i like it.

Im curious to know when a new patch will be out as well, as i dont see my self dropping back to 2.6.5 after putting in work to get 2.6.6 to work prestine.

by **torne** » Wed May 19, 2004 9:24 am

You might well have a performance benefit from 2.6.6, but if you actually want security you shouldn't be so quick to upgrade. =)

by **Sleight of Mind** » Wed May 19, 2004 6:22 pm

from what i've read 2.6.6 is broken for a lot of hardware, right after it was released ~200 patches from -mm were merged into the 2.6 tree. I think it's wise to let the merge rate drop a bit before switching to 2.6, or switching between 2.6 kernels. It's a wild guess really with the current releases.

by **dogmeat** » Thu May 20, 2004 5:25 pm

Box has been running, 6 days solid, not one single issue, and ive been putting it to good use.

MM patches, i dont see anything new applyed to the kernel on ftp.kernel.org.

by To » Fri May 21, 2004 10:55 am

I had several problems on my desktop, a nforce2 chipset board. Not running 2.6.6 on any other machine after this experience.

TÃ³

by **dogmeat** » Fri May 21, 2004 1:34 pm

up to 7 days, not 1 problem.

by **hightower** » Mon May 24, 2004 5:16 am

dogmeat wrote:up to 7 days, not 1 problem.

That doesn't mean anything. 2.6.6 is broken. End of story.

Pipacs, Brad: Skip 2.6.6 grsec and concentrate on 2.6.7.

ciao, Marc

by **dogmeat** » Tue May 25, 2004 4:30 pm

end of story, im sorry you cant configure a kernel to save your life.

Its been up now almost 10 days, NOT 1 issue.

by **hightower** » Tue May 25, 2004 5:20 pm

dogmeat wrote:end of story, im sorry you cant configure a kernel to save your life.
Its been up now almost 10 days, NOT 1 issue.

Yeah, I'm too silly to even use a kernel, not to speak about configuring.

Sleight: What do I have to do to get rid of this? :-)

ciao, mcp

by **Sleight of Mind** » Wed May 26, 2004 4:18 am

mcp: i've got a spare winME cd for you, afaik it does not use a kernel, so you should be Ok with it.

Every dumbass can get a good uptime with any OS/kernel. It's all about actually using the machine. Try stressing it.
Also, if you disable support in config for nearly anything the box will be a lot more stable, but a lot less functional. So don't start about 'I disabled IDE, SCSI, PCI, USB, networking and the box is running for nearly 2 weeks now!!!'

-Rik

by **hightower** » Wed May 26, 2004 7:02 am

Sleight of Mind wrote:mcp: i've got a spare winME cd for you, afaik it does not use a kernel, so you should be Ok with it.

Oh, cool. Please give it to me

Sleight of Mind wrote:Every dumbass can get a good uptime with any OS/kernel. It's all about actually using the machine. Try stressing it.
Also, if you disable support in config for nearly anything the box will be a lot more stable, but a lot less functional. So don't start about 'I disabled IDE, SCSI, PCI, USB, networking and the box is running for nearly 2 weeks now!!!'
-Rik

I bet he'll say everything is enabled in the config

Anyway, maybe its just again a YMMV thing , but we both know that 2.6.6 has problems 2.6.5 didn't have nor 2.6.7-* has.

ciao, Marc

by **dogmeat** » Wed May 26, 2004 1:36 pm

I can post the config for the kernel if youd like

Its my linux desktop machine, I use it to use Office for Linux, By Appliex, Its always running X11, XXMS for mp3's. Mplayer for movies, FTP server to xfer files back and forth between me other 2 servers. Which both have uptimes spanning several months.

Id not say, that i havnt put this machine through stress. I also ran cpuburn to test the cooling system of the machine.

I HAVE put stress on this machine.

(root@thunder)-(11:36 AM Wed May 26)-(boot)
# uname -a
Linux thunder 2.6.6 #3 SMP Fri May 14 14:09:53 MST 2004 i686 AMD Athlon(TM)Processor AuthenticAMD GNU/Linux
(root@thunder)-(11:36 AM Wed May 26)-(boot)
# uptime
11:37:06 up 11 days, 13:08, 3 users, load average: 0.87, 0.41, 0.23

Again, id be more then happy to supply the config

by **KagatoLNX** » Wed May 26, 2004 2:36 pm

Primarily I did it to fix a strange OOPS I was receiving when I enabled traffic shaping. It's also helped me due to some IO/process scheduler fixes. Some of the workloads on my machine run about 5% faster now. I suspect it was an interaction with my SCSI card driver (which was also slightly patched).

There are real updates to the code, but most of the flux is in the driver arena (which I would remind you grSecurity touches very little of that).

Getting 2.6.5 working with BadRAM, grSecurity, and Reiser4 all patched in almost had me to where I want to be. I'm just waiting for OpenAFS to port to 2.6, now.

I haven't seen much of anything in the grSecurity CVS so I suspect we won't see a 2.6.6 patch anytime soon. However, the updates to the VM and networking do warrant an upgrade for certain people. If the port from 2.6.5 to 2.6.6 isn't too grueling, I for one would be thankful.

grsecurity forums

2.6.6 ?

2.6.6 ?

2.6.6

2.6.6