Kernel 2.6.7

[fek]

It seems, there are still some problems with the patch for 2.6.7. I am using the medium level and only customized the restriction for proc, that www-data may access it. I got some strange segmentation faults, for example of mrtg, irssi or dpkg.

Let's have a look in the syslog:

Jul 15 12:45:01 exodus /USR/SBIN/CRON[13409]: (root) CMD (if [ -x /usr/bin/mrtg ] && [ -r /etc/mrtg.cfg ]; then /usr/bin/mrtg /etc/mrtg.cfg >> /var/log/mrtg/mrtg.log 2>&1; fi)
Jul 15 12:45:01 exodus /USR/SBIN/CRON[11878]: (root) CMD (/usr/bin/mrtg /etc/mrtg.conf >/dev/null 2>&1 )
Jul 15 12:45:01 exodus kernel: grsec: signal 11 sent to /usr/bin/mrtg[mrtg:21264] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[sh:11878] uid/euid:0/0 gid/egid:0/0
Jul 15 12:45:01 exodus kernel: grsec: signal 11 sent to /usr/bin/mrtg[mrtg:31263] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[sh:13409] uid/euid:0/0 gid/egid:0/0
Jul 15 12:46:56 exodus kernel: grsec: From 192.168.1.5: signal 11 sent to /usr/sbin/dpkg-preconfigure[dpkg-preconfigu:18818] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[sh:14918] uid/euid:0/0 gid/egid:0/0
Jul 15 12:46:57 exodus kernel: grsec: From 192.168.1.5: signal 11 sent to /usr/sbin/dpkg-divert[dpkg-divert:29794] uid/euid:0/0 gid/egid:0/0, parent /var/lib/dpkg/tmp.ci/preinst[preinst:21015] uid/euid:0/0 gid/egid:0/0
Jul 15 12:47:43 exodus kernel: grsec: From 192.168.1.5: signal 11 sent to /usr/sbin/dpkg-preconfigure[dpkg-preconfigu:13142] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[sh:14529] uid/euid:0/0 gid/egid:0/0
Jul 15 12:47:44 exodus kernel: grsec: From 192.168.1.5: signal 11 sent to /usr/sbin/dpkg-divert[dpkg-divert:4315] uid/euid:0/0 gid/egid:0/0, parent /var/lib/dpkg/tmp.ci/preinst[preinst:20065] uid/euid:0/0 gid/egid:0/0

Anyone an idea, what happens wrong?

[Form]

A status update would be nice. Any idea when the 2.6.7 patch and gradm2 will be released?

[hightower]

A status update would be nice. Any idea when the 2.6.7 patch and gradm2 will be released?

It will be released when 2.6.8 final is out *scnr* ;-((

ciao, Marc

[PaX Team]

A status update would be nice. Any idea when the 2.6.7 patch and gradm2 will be released? :(

It will be released when 2.6.8 final is out *scnr* ;-((

no, the 2.6.7 release is tied to that of 2.4.27 (which may or may not happen before 2.6.8). 2.6.8 won't come anytime soon due to my less than willing to rush with the PaX part.

[netoholic]

Hello people,
since 2.6.7 has numerous security issues, anyone have a decent patchset which fixes
- netfilter
- FPU-bug
- ppos races
(something left out ???)
and fresh released grsecurity could be applied ?
Because people who depend on 2.6.7 have to stick a longer time with it until PAX issues with 2.6.8 are solved, it would be beneficial to many people...
I need 2.6.7 for a few boxes with SATA + ICH5/ICH6...