2.6.19.2-grsec oops?

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

2.6.19.2-grsec oops?

Postby Hal9000 » Tue Jan 16, 2007 7:55 pm

I just upgraded my box from 2.6.17.11-grsec to 2.6.19.2-grsec
The machine started fine, i dont seem to have any problems, but i am getting these errors in console:

Code: Select all
BUG: unable to handle kernel paging request at virtual address fffafe6c
 printing eip:
c0159210
*pgd = 1067
*pmd = 1067
*pte =    0
Oops: 0002 [#1]
CPU:    0
EIP:    0060:[<c0159210>]    Not tainted VLI
EFLAGS: 00010246   (2.6.19.2-grsec #1)
eax: 00000000   ebx: 00000001   ecx: 00000065   edx: c0001ebc
esi: c1b77700   edi: fffafe6c   ebp: c1b77700   esp: f5fa5e4c
ds: 0068   es: 0068   ss: 0068
Process cc1 (pid: 2362, ti=f5fa4000 task=f5f9c030 task.ti=f5fa4000)
Stack: fffaf000 000280d2 00000000 c02e00c8 00000246 c1b77700 c02e00c8 c015958f
       00000001 00000000 00000000 c02e00c8 c02e022c 00000044 00000002 c015971c
       000280d2 00000044 00000000 c02e022c 00000000 000280d2 c02e022c 000280d2
Call Trace:
 [<c015958f>] <0> [<c015971c>] <0> [<c015978a>] <0> [<c0170c92>] <0> [<c01617a0>] <0> [<c0161d09>] <0> [<c014c3f0>] <0> [<c0135c2b>] <0> [<c0135ab0>] <0> [<c029c6d9>] <0> =======================
Code: b6 4c 24 08 b8 01 00 00 00 d3 e0 85 c0 7e 31 89 f5 89 c3 ba 0d 00 00 00 89 e8 e8 2c d8 fd ff b9 00 04 00 00 89 04 24 89 c7 31 c0 <f3> ab 83 c5 20 8b 04 24 ba 0d 00 00 00 e8 9e d8 fd ff 4b 75 d3
EIP: [<c0159210>]  SS:ESP 0068:f5fa5e4c
 <6>note: cc1[2362] exited with preempt_count 1
BUG: unable to handle kernel paging request at virtual address fffafa44
 printing eip:
c0159210
*pgd = 1067
*pmd = 1067
*pte =    0
Oops: 0002 [#2]
CPU:    0
EIP:    0060:[<c0159210>]    Not tainted VLI
EFLAGS: 00010246   (2.6.19.2-grsec #1)
eax: 00000000   ebx: 00000001   ecx: 0000016f   edx: c0001ebc
esi: c1b77620   edi: fffafa44   ebp: c1b77620   esp: f5fd5e6c
ds: 0068   es: 0068   ss: 0068
Process cc1 (pid: 2719, ti=f5fd4000 task=f66d7560 task.ti=f5fd4000)
Stack: fffaf000 000280d2 00000000 c02e00c8 00000246 c1b77620 c02e00c8 c015958f
       c02e022c 00000000 00000000 c02e00c8 c02e022c 00000044 00000002 c015971c
       000280d2 00000044 00000000 c02e022c 00000000 000280d2 c02e022c 000280d2
Call Trace:
 [<c015958f>] <0> [<c015971c>] <0> [<c015978a>] <0> [<c0163321>] <0> [<c015c00f>] <0> [<c01617a0>] <0> [<c0161d09>] <0> [<c0135c2b>] <0> [<c0135ab0>] <0> [<c029c6d9>] <0> =======================
Code: b6 4c 24 08 b8 01 00 00 00 d3 e0 85 c0 7e 31 89 f5 89 c3 ba 0d 00 00 00 89 e8 e8 2c d8 fd ff b9 00 04 00 00 89 04 24 89 c7 31 c0 <f3> ab 83 c5 20 8b 04 24 ba 0d 00 00 00 e8 9e d8 fd ff 4b 75 d3
EIP: [<c0159210>]  SS:ESP 0068:f5fd5e6c
 <6>note: cc1[2719] exited with preempt_count 1
BUG: unable to handle kernel paging request at virtual address fffaf004
 printing eip:
c0159210
*pgd = 1067
*pmd = 1067
*pte =    0
Oops: 0002 [#3]
CPU:    0
EIP:    0060:[<c0159210>]    Not tainted VLI
EFLAGS: 00010246   (2.6.19.2-grsec #1)
eax: 00000000   ebx: 00000001   ecx: 000003ff   edx: c0001ebc
esi: c1b5b700   edi: fffaf004   ebp: c1b5b700   esp: f5865e74
ds: 0068   es: 0068   ss: 0068
Process cc1 (pid: 4368, ti=f5864000 task=f5e68a90 task.ti=f5864000)
Stack: fffaf000 000280d2 00000000 c02e00c8 00000246 c1b5b700 c02e00c8 c015958f
       c02e00f0 00000000 00000000 c02e00c8 c02e022c 00000044 00000002 c015971c
       000280d2 00000044 00000000 c02e022c 00000000 000280d2 c02e022c 000280d2
Call Trace:
 [<c015958f>] <0> [<c015971c>] <0> [<c015978a>] <0> [<c015c00f>] <0> [<c01617a0>] <0> [<c0161d09>] <0> [<c0135c2b>] <0> [<c0135ab0>] <0> [<c029c6d9>] <0> =======================
Code: b6 4c 24 08 b8 01 00 00 00 d3 e0 85 c0 7e 31 89 f5 89 c3 ba 0d 00 00 00 89 e8 e8 2c d8 fd ff b9 00 04 00 00 89 04 24 89 c7 31 c0 <f3> ab 83 c5 20 8b 04 24 ba 0d 00 00 00 e8 9e d8 fd ff 4b 75 d3
EIP: [<c0159210>]  SS:ESP 0068:f5865e74
 <6>note: cc1[4368] exited with preempt_count 1
BUG: unable to handle kernel paging request at virtual address fffaf520
 printing eip:
c0159210
*pgd = 1067
*pmd = 1067
*pte =    0
Oops: 0002 [#4]
CPU:    0
EIP:    0060:[<c0159210>]    Not tainted VLI
EFLAGS: 00010246   (2.6.19.2-grsec #1)
eax: 00000000   ebx: 00000001   ecx: 000002b8   edx: c0001ebc
esi: c1b553a0   edi: fffaf520   ebp: c1b553a0   esp: f5fc3e24
ds: 0068   es: 0068   ss: 0068
Process cc1 (pid: 4595, ti=f5fc2000 task=f5f99a90 task.ti=f5fc2000)
Stack: fffaf000 000280d2 00000000 c02e00c8 00000246 c1b553a0 c02e00c8 c015958f
       c02e00f0 00000000 00000000 c02e00c8 c02e022c 00000044 00000002 c015971c
       000280d2 00000044 00000000 c02e022c 00000000 000280d2 c02e022c 000280d2
Call Trace:
 [<c015958f>] <0> [<c015971c>] <0> [<c015978a>] <0> [<c015c00f>] <0> [<c01617a0>] <0> [<c0161d09>] <0> [<c0135c2b>] <0> [<c0135ab0>] <0> [<c029c6d9>] <0> =======================
Code: b6 4c 24 08 b8 01 00 00 00 d3 e0 85 c0 7e 31 89 f5 89 c3 ba 0d 00 00 00 89 e8 e8 2c d8 fd ff b9 00 04 00 00 89 04 24 89 c7 31 c0 <f3> ab 83 c5 20 8b 04 24 ba 0d 00 00 00 e8 9e d8 fd ff 4b 75 d3
EIP: [<c0159210>]  SS:ESP 0068:f5fc3e24
 <6>note: cc1[4595] exited with preempt_count 1
BUG: unable to handle kernel paging request at virtual address fffaf5d8
 printing eip:
c0159210
*pgd = 1067
*pmd = 1067
*pte =    0
Oops: 0002 [#5]
CPU:    0
EIP:    0060:[<c0159210>]    Not tainted VLI
EFLAGS: 00010246   (2.6.19.2-grsec #1)
eax: 00000000   ebx: 00000001   ecx: 0000028a   edx: c0001ebc
esi: c1b53d80   edi: fffaf5d8   ebp: c1b53d80   esp: f5863e54
ds: 0068   es: 0068   ss: 0068
Process cc1 (pid: 5010, ti=f5862000 task=f5e92030 task.ti=f5862000)
Stack: fffaf000 000280d2 00000000 c02e00c8 00000246 c1b53d80 c02e00c8 c015958f
       00000000 00000000 00000000 c02e00c8 c02e022c 00000044 00000002 c015971c
       000280d2 00000044 00000000 c02e022c 00000000 000280d2 c02e022c 000280d2
Call Trace:
 [<c015958f>] <0> [<c015971c>] <0> [<c015978a>] <0> [<c014c3f0>] <0> [<c01617a0>] <0> [<c0161d09>] <0> [<c0135e9a>] <0> [<c0135c2b>] <0> [<c0170b76>] <0> [<c0171b6e>] <0> [<c0184b8b>] <0> [<c0135ab0>] <0> [<c029c6d9>] <0> =======================
Code: b6 4c 24 08 b8 01 00 00 00 d3 e0 85 c0 7e 31 89 f5 89 c3 ba 0d 00 00 00 89 e8 e8 2c d8 fd ff b9 00 04 00 00 89 04 24 89 c7 31 c0 <f3> ab 83 c5 20 8b 04 24 ba 0d 00 00 00 e8 9e d8 fd ff 4b 75 d3
EIP: [<c0159210>]  SS:ESP 0068:f5863e54
 <6>note: cc1[5010] exited with preempt_count 1
BUG: unable to handle kernel paging request at virtual address fffaff20
 printing eip:
c0159210
*pgd = 1067
*pmd = 1067
*pte =    0
Oops: 0002 [#6]
CPU:    0
EIP:    0060:[<c0159210>]    Not tainted VLI
EFLAGS: 00010246   (2.6.19.2-grsec #1)
eax: 00000000   ebx: 00000001   ecx: 00000038   edx: c0001ebc
esi: c1b540c0   edi: fffaff20   ebp: c1b540c0   esp: f5eb5e0c
ds: 0068   es: 0068   ss: 0068
Process cc1 (pid: 5140, ti=f5eb4000 task=f5d77a90 task.ti=f5eb4000)
Stack: fffaf000 000280d2 00000000 c02e00c8 00000246 c1b540c0 c02e00c8 c015958f
       c0156275 00000000 00000000 c02e00c8 c02e022c 00000044 00000002 c015971c
       000280d2 00000044 00000000 c02e022c 00000000 000280d2 c02e022c 000280d2
Call Trace:
 [<c015958f>] <0> [<c0156275>] <0> [<c015971c>] <0> [<c015978a>] <0> [<c0170a92>] <0> [<c01617a0>] <0> [<c0161d09>] <0> [<c0135c2b>] <0> [<c018089e>] <0> [<c017045e>] <0> [<c0135ab0>] <0> [<c029c6d9>] <0> =======================
Code: b6 4c 24 08 b8 01 00 00 00 d3 e0 85 c0 7e 31 89 f5 89 c3 ba 0d 00 00 00 89 e8 e8 2c d8 fd ff b9 00 04 00 00 89 04 24 89 c7 31 c0 <f3> ab 83 c5 20 8b 04 24 ba 0d 00 00 00 e8 9e d8 fd ff 4b 75 d3
EIP: [<c0159210>]  SS:ESP 0068:f5eb5e0c
 <6>note: cc1[5140] exited with preempt_count 1
BUG: unable to handle kernel paging request at virtual address fffaf72c
 printing eip:
c0159210
*pgd = 1067
*pmd = 1067
*pte =    0
Oops: 0002 [#7]
CPU:    0
EIP:    0060:[<c0159210>]    Not tainted VLI
EFLAGS: 00010246   (2.6.19.2-grsec #1)
eax: 00000000   ebx: 00000001   ecx: 00000235   edx: c0001ebc
esi: c1b06340   edi: fffaf72c   ebp: c1b06340   esp: f5b3be0c
ds: 0068   es: 0068   ss: 0068
Process cc1 (pid: 6220, ti=f5b3a000 task=f5ad8030 task.ti=f5b3a000)
Stack: fffaf000 000280d2 00000000 c02e00c8 00000246 c1b06340 c02e00c8 c015958f
       00000246 00000000 00000000 c02e00c8 c02e022c 00000044 00000002 c015971c
       000280d2 00000044 00000000 c02e022c 00000000 000280d2 c02e022c 000280d2
Call Trace:
 [<c015958f>] <0> [<c015971c>] <0> [<c015978a>] <0> [<c015978a>] <0> [<c01617a0>] <0> [<c0161d09>] <0> [<c0135c2b>] <0> [<c0135ab0>] <0> [<c029c6d9>] <0> =======================
Code: b6 4c 24 08 b8 01 00 00 00 d3 e0 85 c0 7e 31 89 f5 89 c3 ba 0d 00 00 00 89 e8 e8 2c d8 fd ff b9 00 04 00 00 89 04 24 89 c7 31 c0 <f3> ab 83 c5 20 8b 04 24 ba 0d 00 00 00 e8 9e d8 fd ff 4b 75 d3
EIP: [<c0159210>]  SS:ESP 0068:f5b3be0c
 <6>note: cc1[6220] exited with preempt_count 1
BUG: unable to handle kernel paging request at virtual address fffaf42c
 printing eip:
c0159210
*pgd = 1067
*pmd = 1067
*pte =    0
Oops: 0002 [#8]
CPU:    0
EIP:    0060:[<c0159210>]    Not tainted VLI
EFLAGS: 00010246   (2.6.19.2-grsec #1)
eax: 00000000   ebx: 00000001   ecx: 000002f5   edx: c0001ebc
esi: c1b0b100   edi: fffaf42c   ebp: c1b0b100   esp: f5b3fe4c
ds: 0068   es: 0068   ss: 0068
Process cc1 (pid: 8832, ti=f5b3e000 task=f5ad8560 task.ti=f5b3e000)
Stack: fffaf000 000280d2 00000000 c02e00c8 00000246 c1b0b100 c02e00c8 c015958f
       c02e00f0 00000000 00000000 c02e00c8 c02e022c 00000044 00000002 c015971c
       000280d2 00000044 00000000 c02e022c 00000000 000280d2 c02e022c 000280d2
Call Trace:
 [<c015958f>] <0> [<c015971c>] <0> [<c015978a>] <0> [<c01617a0>] <0> [<c0161d09>] <0> [<c0135c2b>] <0> [<c0135ab0>] <0> [<c029c6d9>] <0> =======================
Code: b6 4c 24 08 b8 01 00 00 00 d3 e0 85 c0 7e 31 89 f5 89 c3 ba 0d 00 00 00 89 e8 e8 2c d8 fd ff b9 00 04 00 00 89 04 24 89 c7 31 c0 <f3> ab 83 c5 20 8b 04 24 ba 0d 00 00 00 e8 9e d8 fd ff 4b 75 d3
EIP: [<c0159210>]  SS:ESP 0068:f5b3fe4c
 <6>note: cc1[8832] exited with preempt_count 1


How worried should i be? Any idea where the problem could be originated from?

Here is my kernel config:
Code: Select all
#
# Automatically generated make config: don't edit
# Linux kernel version: 2.6.19.2
# Wed Jan 17 00:53:04 2007
#
CONFIG_X86_32=y
CONFIG_GENERIC_TIME=y
CONFIG_LOCKDEP_SUPPORT=y
CONFIG_STACKTRACE_SUPPORT=y
CONFIG_SEMAPHORE_SLEEPERS=y
CONFIG_X86=y
CONFIG_MMU=y
CONFIG_GENERIC_ISA_DMA=y
CONFIG_GENERIC_IOMAP=y
CONFIG_GENERIC_HWEIGHT=y
CONFIG_ARCH_MAY_HAVE_PC_FDC=y
CONFIG_DMI=y
CONFIG_DEFCONFIG_LIST="/lib/modules/$UNAME_RELEASE/.config"

#
# Code maturity level options
#
# CONFIG_EXPERIMENTAL is not set
CONFIG_BROKEN_ON_SMP=y
CONFIG_INIT_ENV_ARG_LIMIT=32

#
# General setup
#
CONFIG_LOCALVERSION=""
# CONFIG_LOCALVERSION_AUTO is not set
CONFIG_SWAP=y
CONFIG_SYSVIPC=y
# CONFIG_IPC_NS is not set
# CONFIG_BSD_PROCESS_ACCT is not set
# CONFIG_TASKSTATS is not set
# CONFIG_UTS_NS is not set
# CONFIG_AUDIT is not set
# CONFIG_IKCONFIG is not set
# CONFIG_RELAY is not set
CONFIG_INITRAMFS_SOURCE=""
CONFIG_SYSCTL=y
# CONFIG_EMBEDDED is not set
CONFIG_UID16=y
CONFIG_SYSCTL_SYSCALL=y
CONFIG_HOTPLUG=y
CONFIG_PRINTK=y
CONFIG_BUG=y
CONFIG_ELF_CORE=y
CONFIG_BASE_FULL=y
CONFIG_FUTEX=y
CONFIG_EPOLL=y
CONFIG_SHMEM=y
CONFIG_SLAB=y
CONFIG_VM_EVENT_COUNTERS=y
CONFIG_RT_MUTEXES=y
# CONFIG_TINY_SHMEM is not set
CONFIG_BASE_SMALL=0
# CONFIG_SLOB is not set

#
# Loadable module support
#
# CONFIG_MODULES is not set

#
# Block layer
#
CONFIG_BLOCK=y
# CONFIG_LBD is not set
# CONFIG_BLK_DEV_IO_TRACE is not set
# CONFIG_LSF is not set

#
# IO Schedulers
#
CONFIG_IOSCHED_NOOP=y
CONFIG_IOSCHED_AS=y
# CONFIG_IOSCHED_DEADLINE is not set
# CONFIG_IOSCHED_CFQ is not set
CONFIG_DEFAULT_AS=y
# CONFIG_DEFAULT_DEADLINE is not set
# CONFIG_DEFAULT_CFQ is not set
# CONFIG_DEFAULT_NOOP is not set
CONFIG_DEFAULT_IOSCHED="anticipatory"

#
# Processor type and features
#
# CONFIG_SMP is not set
CONFIG_X86_PC=y
# CONFIG_X86_ELAN is not set
# CONFIG_X86_VOYAGER is not set
# CONFIG_X86_NUMAQ is not set
# CONFIG_X86_SUMMIT is not set
# CONFIG_X86_BIGSMP is not set
# CONFIG_X86_VISWS is not set
# CONFIG_X86_GENERICARCH is not set
# CONFIG_X86_ES7000 is not set
# CONFIG_M386 is not set
# CONFIG_M486 is not set
# CONFIG_M586 is not set
# CONFIG_M586TSC is not set
# CONFIG_M586MMX is not set
# CONFIG_M686 is not set
# CONFIG_MPENTIUMII is not set
# CONFIG_MPENTIUMIII is not set
# CONFIG_MPENTIUMM is not set
# CONFIG_MPENTIUM4 is not set
# CONFIG_MK6 is not set
# CONFIG_MK7 is not set
CONFIG_MK8=y
# CONFIG_MCRUSOE is not set
# CONFIG_MEFFICEON is not set
# CONFIG_MWINCHIPC6 is not set
# CONFIG_MWINCHIP2 is not set
# CONFIG_MWINCHIP3D is not set
# CONFIG_MGEODEGX1 is not set
# CONFIG_MGEODE_LX is not set
# CONFIG_MCYRIXIII is not set
# CONFIG_MVIAC3_2 is not set
# CONFIG_X86_GENERIC is not set
CONFIG_X86_CMPXCHG=y
CONFIG_X86_XADD=y
CONFIG_X86_L1_CACHE_SHIFT=6
CONFIG_RWSEM_XCHGADD_ALGORITHM=y
CONFIG_GENERIC_CALIBRATE_DELAY=y
CONFIG_X86_WP_WORKS_OK=y
CONFIG_X86_INVLPG=y
CONFIG_X86_BSWAP=y
CONFIG_X86_POPAD_OK=y
CONFIG_X86_CMPXCHG64=y
CONFIG_X86_ALIGNMENT_16=y
CONFIG_X86_GOOD_APIC=y
CONFIG_X86_INTEL_USERCOPY=y
CONFIG_X86_USE_PPRO_CHECKSUM=y
CONFIG_X86_TSC=y
# CONFIG_HPET_TIMER is not set
CONFIG_PREEMPT_NONE=y
# CONFIG_PREEMPT_VOLUNTARY is not set
# CONFIG_PREEMPT is not set
CONFIG_X86_UP_APIC=y
CONFIG_X86_UP_IOAPIC=y
CONFIG_X86_LOCAL_APIC=y
CONFIG_X86_IO_APIC=y
CONFIG_X86_MCE=y
# CONFIG_X86_MCE_NONFATAL is not set
# CONFIG_X86_MCE_P4THERMAL is not set
CONFIG_VM86=y
# CONFIG_TOSHIBA is not set
# CONFIG_I8K is not set
# CONFIG_X86_REBOOTFIXUPS is not set
# CONFIG_MICROCODE is not set
# CONFIG_X86_MSR is not set
# CONFIG_X86_CPUID is not set

#
# Firmware Drivers
#
# CONFIG_EDD is not set
# CONFIG_DELL_RBU is not set
# CONFIG_DCDBAS is not set
# CONFIG_NOHIGHMEM is not set
CONFIG_HIGHMEM4G=y
# CONFIG_HIGHMEM64G is not set
CONFIG_PAGE_OFFSET=0xC0000000
CONFIG_HIGHMEM=y
CONFIG_ARCH_POPULATES_NODE_MAP=y
CONFIG_FLATMEM=y
CONFIG_FLAT_NODE_MEM_MAP=y
# CONFIG_SPARSEMEM_STATIC is not set
CONFIG_SPLIT_PTLOCK_CPUS=4
# CONFIG_RESOURCES_64BIT is not set
# CONFIG_HIGHPTE is not set
# CONFIG_MATH_EMULATION is not set
# CONFIG_MTRR is not set
CONFIG_REGPARM=y
CONFIG_SECCOMP=y
# CONFIG_HZ_100 is not set
CONFIG_HZ_250=y
# CONFIG_HZ_1000 is not set
CONFIG_HZ=250
# CONFIG_KEXEC is not set
CONFIG_PHYSICAL_START=0x100000
CONFIG_COMPAT_VDSO=y
CONFIG_ARCH_ENABLE_MEMORY_HOTPLUG=y

#
# Power management options (ACPI, APM)
#
# CONFIG_PM is not set

#
# ACPI (Advanced Configuration and Power Interface) Support
#
# CONFIG_ACPI is not set

#
# CPU Frequency scaling
#
# CONFIG_CPU_FREQ is not set

#
# Bus options (PCI, PCMCIA, EISA, MCA, ISA)
#
CONFIG_PCI=y
# CONFIG_PCI_GOBIOS is not set
# CONFIG_PCI_GOMMCONFIG is not set
# CONFIG_PCI_GODIRECT is not set
CONFIG_PCI_GOANY=y
CONFIG_PCI_DIRECT=y
# CONFIG_PCIEPORTBUS is not set
# CONFIG_PCI_MSI is not set
CONFIG_HT_IRQ=y
CONFIG_ISA_DMA_API=y
# CONFIG_ISA is not set
# CONFIG_MCA is not set
# CONFIG_SCx200 is not set

#
# PCCARD (PCMCIA/CardBus) support
#
# CONFIG_PCCARD is not set

#
# PCI Hotplug Support
#

#
# Executable file formats
#
CONFIG_BINFMT_ELF=y
# CONFIG_BINFMT_AOUT is not set
CONFIG_BINFMT_MISC=y

#
# Networking
#
CONFIG_NET=y

#
# Networking options
#
# CONFIG_NETDEBUG is not set
CONFIG_PACKET=y
CONFIG_PACKET_MMAP=y
CONFIG_UNIX=y
# CONFIG_NET_KEY is not set
CONFIG_INET=y
# CONFIG_IP_MULTICAST is not set
CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_ASK_IP_FIB_HASH=y
# CONFIG_IP_FIB_TRIE is not set
CONFIG_IP_FIB_HASH=y
# CONFIG_IP_MULTIPLE_TABLES is not set
# CONFIG_IP_ROUTE_MULTIPATH is not set
# CONFIG_IP_ROUTE_VERBOSE is not set
# CONFIG_IP_PNP is not set
# CONFIG_NET_IPIP is not set
# CONFIG_NET_IPGRE is not set
# CONFIG_SYN_COOKIES is not set
# CONFIG_INET_AH is not set
# CONFIG_INET_ESP is not set
# CONFIG_INET_IPCOMP is not set
# CONFIG_INET_XFRM_TUNNEL is not set
# CONFIG_INET_TUNNEL is not set
# CONFIG_INET_XFRM_MODE_TRANSPORT is not set
# CONFIG_INET_XFRM_MODE_TUNNEL is not set
# CONFIG_INET_XFRM_MODE_BEET is not set
# CONFIG_INET_DIAG is not set
# CONFIG_TCP_CONG_ADVANCED is not set
CONFIG_TCP_CONG_CUBIC=y
CONFIG_DEFAULT_TCP_CONG="cubic"

#
# IP: Virtual Server Configuration
#
# CONFIG_IP_VS is not set
# CONFIG_IPV6 is not set
# CONFIG_INET6_XFRM_TUNNEL is not set
# CONFIG_INET6_TUNNEL is not set
# CONFIG_NETWORK_SECMARK is not set
CONFIG_NETFILTER=y
# CONFIG_NETFILTER_DEBUG is not set

#
# Core Netfilter Configuration
#
# CONFIG_NETFILTER_NETLINK is not set
CONFIG_NETFILTER_XTABLES=y
# CONFIG_NETFILTER_XT_TARGET_CLASSIFY is not set
# CONFIG_NETFILTER_XT_TARGET_DSCP is not set
# CONFIG_NETFILTER_XT_TARGET_MARK is not set
# CONFIG_NETFILTER_XT_TARGET_NFQUEUE is not set
# CONFIG_NETFILTER_XT_MATCH_COMMENT is not set
# CONFIG_NETFILTER_XT_MATCH_CONNTRACK is not set
# CONFIG_NETFILTER_XT_MATCH_DCCP is not set
# CONFIG_NETFILTER_XT_MATCH_DSCP is not set
# CONFIG_NETFILTER_XT_MATCH_ESP is not set
# CONFIG_NETFILTER_XT_MATCH_HELPER is not set
# CONFIG_NETFILTER_XT_MATCH_LENGTH is not set
# CONFIG_NETFILTER_XT_MATCH_LIMIT is not set
# CONFIG_NETFILTER_XT_MATCH_MAC is not set
# CONFIG_NETFILTER_XT_MATCH_MARK is not set
# CONFIG_NETFILTER_XT_MATCH_MULTIPORT is not set
# CONFIG_NETFILTER_XT_MATCH_PKTTYPE is not set
# CONFIG_NETFILTER_XT_MATCH_QUOTA is not set
# CONFIG_NETFILTER_XT_MATCH_REALM is not set
CONFIG_NETFILTER_XT_MATCH_STATE=y
# CONFIG_NETFILTER_XT_MATCH_STATISTIC is not set
# CONFIG_NETFILTER_XT_MATCH_STRING is not set
# CONFIG_NETFILTER_XT_MATCH_TCPMSS is not set

#
# IP: Netfilter Configuration
#
CONFIG_IP_NF_CONNTRACK=y
# CONFIG_IP_NF_CT_ACCT is not set
# CONFIG_IP_NF_CONNTRACK_MARK is not set
CONFIG_IP_NF_FTP=y
CONFIG_IP_NF_IRC=y
# CONFIG_IP_NF_TFTP is not set
# CONFIG_IP_NF_AMANDA is not set
# CONFIG_IP_NF_PPTP is not set
# CONFIG_IP_NF_QUEUE is not set
CONFIG_IP_NF_IPTABLES=y
# CONFIG_IP_NF_MATCH_IPRANGE is not set
# CONFIG_IP_NF_MATCH_TOS is not set
# CONFIG_IP_NF_MATCH_RECENT is not set
# CONFIG_IP_NF_MATCH_ECN is not set
# CONFIG_IP_NF_MATCH_AH is not set
# CONFIG_IP_NF_MATCH_TTL is not set
# CONFIG_IP_NF_MATCH_OWNER is not set
# CONFIG_IP_NF_MATCH_ADDRTYPE is not set
# CONFIG_IP_NF_MATCH_HASHLIMIT is not set
# CONFIG_IP_NF_MATCH_STEALTH is not set
CONFIG_IP_NF_FILTER=y
CONFIG_IP_NF_TARGET_REJECT=y
# CONFIG_IP_NF_TARGET_LOG is not set
# CONFIG_IP_NF_TARGET_ULOG is not set
# CONFIG_IP_NF_TARGET_TCPMSS is not set
CONFIG_IP_NF_NAT=y
CONFIG_IP_NF_NAT_NEEDED=y
# CONFIG_IP_NF_TARGET_MASQUERADE is not set
# CONFIG_IP_NF_TARGET_REDIRECT is not set
# CONFIG_IP_NF_TARGET_NETMAP is not set
# CONFIG_IP_NF_TARGET_SAME is not set
CONFIG_IP_NF_NAT_IRC=y
CONFIG_IP_NF_NAT_FTP=y
CONFIG_IP_NF_MANGLE=y
# CONFIG_IP_NF_TARGET_TOS is not set
# CONFIG_IP_NF_TARGET_ECN is not set
# CONFIG_IP_NF_TARGET_TTL is not set
# CONFIG_IP_NF_RAW is not set
# CONFIG_IP_NF_ARPTABLES is not set
# CONFIG_BRIDGE is not set
# CONFIG_VLAN_8021Q is not set
# CONFIG_DECNET is not set
# CONFIG_LLC2 is not set
# CONFIG_IPX is not set
# CONFIG_ATALK is not set

#
# QoS and/or fair queueing
#
# CONFIG_NET_SCHED is not set

#
# Network testing
#
# CONFIG_NET_PKTGEN is not set
# CONFIG_HAMRADIO is not set
# CONFIG_IRDA is not set
# CONFIG_BT is not set
# CONFIG_IEEE80211 is not set

#
# Device Drivers
#

#
# Generic Driver Options
#
CONFIG_STANDALONE=y
CONFIG_PREVENT_FIRMWARE_BUILD=y
CONFIG_FW_LOADER=y
# CONFIG_SYS_HYPERVISOR is not set

#
# Connector - unified userspace <-> kernelspace linker
#
# CONFIG_CONNECTOR is not set

#
# Memory Technology Devices (MTD)
#
# CONFIG_MTD is not set

#
# Parallel port support
#
# CONFIG_PARPORT is not set

#
# Plug and Play support
#

#
# Block devices
#
# CONFIG_BLK_DEV_FD is not set
# CONFIG_BLK_CPQ_DA is not set
# CONFIG_BLK_CPQ_CISS_DA is not set
# CONFIG_BLK_DEV_DAC960 is not set
# CONFIG_BLK_DEV_COW_COMMON is not set
# CONFIG_BLK_DEV_LOOP is not set
# CONFIG_BLK_DEV_NBD is not set
# CONFIG_BLK_DEV_SX8 is not set
# CONFIG_BLK_DEV_RAM is not set
# CONFIG_BLK_DEV_INITRD is not set
# CONFIG_CDROM_PKTCDVD is not set
# CONFIG_ATA_OVER_ETH is not set

#
# Misc devices
#
# CONFIG_SGI_IOC4 is not set

#
# ATA/ATAPI/MFM/RLL support
#
# CONFIG_IDE is not set

#
# SCSI device support
#
CONFIG_RAID_ATTRS=y
CONFIG_SCSI=y
# CONFIG_SCSI_NETLINK is not set
# CONFIG_SCSI_PROC_FS is not set

#
# SCSI support type (disk, tape, CD-ROM)
#
CONFIG_BLK_DEV_SD=y
# CONFIG_CHR_DEV_ST is not set
# CONFIG_CHR_DEV_OSST is not set
# CONFIG_BLK_DEV_SR is not set
# CONFIG_CHR_DEV_SG is not set
# CONFIG_CHR_DEV_SCH is not set

#
# Some SCSI devices (e.g. CD jukebox) support multiple LUNs
#
# CONFIG_SCSI_MULTI_LUN is not set
# CONFIG_SCSI_CONSTANTS is not set
# CONFIG_SCSI_LOGGING is not set

#
# SCSI Transports
#
# CONFIG_SCSI_SPI_ATTRS is not set
# CONFIG_SCSI_FC_ATTRS is not set
# CONFIG_SCSI_ISCSI_ATTRS is not set
# CONFIG_SCSI_SAS_ATTRS is not set
# CONFIG_SCSI_SAS_LIBSAS is not set

#
# SCSI low-level drivers
#
# CONFIG_ISCSI_TCP is not set
CONFIG_BLK_DEV_3W_XXXX_RAID=y
# CONFIG_SCSI_3W_9XXX is not set
# CONFIG_SCSI_ACARD is not set
# CONFIG_SCSI_AACRAID is not set
# CONFIG_SCSI_AIC7XXX is not set
# CONFIG_SCSI_AIC7XXX_OLD is not set
# CONFIG_SCSI_AIC79XX is not set
# CONFIG_SCSI_AIC94XX is not set
# CONFIG_SCSI_DPT_I2O is not set
# CONFIG_SCSI_ADVANSYS is not set
# CONFIG_SCSI_ARCMSR is not set
# CONFIG_MEGARAID_NEWGEN is not set
# CONFIG_MEGARAID_LEGACY is not set
# CONFIG_MEGARAID_SAS is not set
# CONFIG_SCSI_HPTIOP is not set
# CONFIG_SCSI_BUSLOGIC is not set
# CONFIG_SCSI_DMX3191D is not set
# CONFIG_SCSI_EATA is not set
# CONFIG_SCSI_FUTURE_DOMAIN is not set
# CONFIG_SCSI_GDTH is not set
# CONFIG_SCSI_IPS is not set
# CONFIG_SCSI_INITIO is not set
# CONFIG_SCSI_INIA100 is not set
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
# CONFIG_SCSI_QLOGIC_1280 is not set
# CONFIG_SCSI_QLA_FC is not set
# CONFIG_SCSI_QLA_ISCSI is not set
# CONFIG_SCSI_LPFC is not set
# CONFIG_SCSI_DC390T is not set
# CONFIG_SCSI_NSP32 is not set
# CONFIG_SCSI_DEBUG is not set

#
# Serial ATA (prod) and Parallel ATA (experimental) drivers
#
# CONFIG_ATA is not set

#
# Multi-device support (RAID and LVM)
#
# CONFIG_MD is not set

#
# Fusion MPT device support
#
# CONFIG_FUSION is not set
# CONFIG_FUSION_SPI is not set
# CONFIG_FUSION_FC is not set
# CONFIG_FUSION_SAS is not set

#
# IEEE 1394 (FireWire) support
#
# CONFIG_IEEE1394 is not set

#
# I2O device support
#
# CONFIG_I2O is not set

#
# Network device support
#
CONFIG_NETDEVICES=y
# CONFIG_DUMMY is not set
# CONFIG_BONDING is not set
# CONFIG_EQUALIZER is not set
# CONFIG_TUN is not set

#
# ARCnet devices
#
# CONFIG_ARCNET is not set

#
# PHY device support
#

#
# Ethernet (10 or 100Mbit)
#
# CONFIG_NET_ETHERNET is not set

#
# Ethernet (1000 Mbit)
#
# CONFIG_ACENIC is not set
# CONFIG_DL2K is not set
# CONFIG_E1000 is not set
# CONFIG_NS83820 is not set
# CONFIG_HAMACHI is not set
# CONFIG_R8169 is not set
# CONFIG_SIS190 is not set
# CONFIG_SKGE is not set
# CONFIG_SKY2 is not set
# CONFIG_SK98LIN is not set
CONFIG_TIGON3=y
# CONFIG_BNX2 is not set
# CONFIG_QLA3XXX is not set

#
# Ethernet (10000 Mbit)
#
# CONFIG_CHELSIO_T1 is not set
# CONFIG_IXGB is not set
# CONFIG_S2IO is not set
# CONFIG_MYRI10GE is not set

#
# Token Ring devices
#
# CONFIG_TR is not set

#
# Wireless LAN (non-hamradio)
#
# CONFIG_NET_RADIO is not set

#
# Wan interfaces
#
# CONFIG_WAN is not set
# CONFIG_FDDI is not set
# CONFIG_PPP is not set
# CONFIG_SLIP is not set
# CONFIG_NET_FC is not set
# CONFIG_NETPOLL is not set
# CONFIG_NET_POLL_CONTROLLER is not set

#
# ISDN subsystem
#
# CONFIG_ISDN is not set

#
# Telephony Support
#
# CONFIG_PHONE is not set

#
# Input device support
#
CONFIG_INPUT=y
# CONFIG_INPUT_FF_MEMLESS is not set

#
# Userland interfaces
#
CONFIG_INPUT_MOUSEDEV=y
# CONFIG_INPUT_MOUSEDEV_PSAUX is not set
CONFIG_INPUT_MOUSEDEV_SCREEN_X=1024
CONFIG_INPUT_MOUSEDEV_SCREEN_Y=768
# CONFIG_INPUT_JOYDEV is not set
# CONFIG_INPUT_TSDEV is not set
# CONFIG_INPUT_EVDEV is not set
# CONFIG_INPUT_EVBUG is not set

#
# Input Device Drivers
#
CONFIG_INPUT_KEYBOARD=y
CONFIG_KEYBOARD_ATKBD=y
CONFIG_KEYBOARD_SUNKBD=y
CONFIG_KEYBOARD_LKKBD=y
CONFIG_KEYBOARD_XTKBD=y
CONFIG_KEYBOARD_NEWTON=y
# CONFIG_KEYBOARD_STOWAWAY is not set
# CONFIG_INPUT_MOUSE is not set
# CONFIG_INPUT_JOYSTICK is not set
# CONFIG_INPUT_TOUCHSCREEN is not set
# CONFIG_INPUT_MISC is not set

#
# Hardware I/O ports
#
CONFIG_SERIO=y
CONFIG_SERIO_I8042=y
# CONFIG_SERIO_SERPORT is not set
# CONFIG_SERIO_CT82C710 is not set
# CONFIG_SERIO_PCIPS2 is not set
CONFIG_SERIO_LIBPS2=y
# CONFIG_SERIO_RAW is not set
# CONFIG_GAMEPORT is not set

#
# Character devices
#
CONFIG_VT=y
CONFIG_VT_CONSOLE=y
CONFIG_HW_CONSOLE=y
# CONFIG_VT_HW_CONSOLE_BINDING is not set
# CONFIG_SERIAL_NONSTANDARD is not set

#
# Serial drivers
#
CONFIG_SERIAL_8250=y
CONFIG_SERIAL_8250_CONSOLE=y
CONFIG_SERIAL_8250_PCI=y
CONFIG_SERIAL_8250_NR_UARTS=2
CONFIG_SERIAL_8250_RUNTIME_UARTS=1
# CONFIG_SERIAL_8250_EXTENDED is not set

#
# Non-8250 serial port support
#
CONFIG_SERIAL_CORE=y
CONFIG_SERIAL_CORE_CONSOLE=y
# CONFIG_SERIAL_JSM is not set
CONFIG_UNIX98_PTYS=y
CONFIG_LEGACY_PTYS=y
CONFIG_LEGACY_PTY_COUNT=16

#
# IPMI
#
# CONFIG_IPMI_HANDLER is not set

#
# Watchdog Cards
#
# CONFIG_WATCHDOG is not set
# CONFIG_HW_RANDOM is not set
# CONFIG_NVRAM is not set
CONFIG_RTC=y
# CONFIG_DTLK is not set
# CONFIG_R3964 is not set
# CONFIG_APPLICOM is not set

#
# Ftape, the floppy tape device driver
#
# CONFIG_FTAPE is not set
# CONFIG_AGP is not set
# CONFIG_DRM is not set
# CONFIG_MWAVE is not set
# CONFIG_PC8736x_GPIO is not set
# CONFIG_NSC_GPIO is not set
# CONFIG_CS5535_GPIO is not set
# CONFIG_RAW_DRIVER is not set
CONFIG_HANGCHECK_TIMER=y

#
# TPM devices
#

#
# I2C support
#
# CONFIG_I2C is not set

#
# SPI support
#
# CONFIG_SPI is not set
# CONFIG_SPI_MASTER is not set

#
# Dallas's 1-wire bus
#
# CONFIG_W1 is not set

#
# Hardware Monitoring support
#
CONFIG_HWMON=y
# CONFIG_HWMON_VID is not set
# CONFIG_SENSORS_HDAPS is not set
# CONFIG_HWMON_DEBUG_CHIP is not set

#
# Multimedia devices
#
# CONFIG_VIDEO_DEV is not set

#
# Digital Video Broadcasting Devices
#
# CONFIG_DVB is not set

#
# Graphics support
#
# CONFIG_FIRMWARE_EDID is not set
# CONFIG_FB is not set

#
# Console display driver support
#
CONFIG_VGA_CONSOLE=y
# CONFIG_VGACON_SOFT_SCROLLBACK is not set
# CONFIG_VIDEO_SELECT is not set
CONFIG_DUMMY_CONSOLE=y
# CONFIG_BACKLIGHT_LCD_SUPPORT is not set

#
# Sound
#
# CONFIG_SOUND is not set

#
# USB support
#
CONFIG_USB_ARCH_HAS_HCD=y
CONFIG_USB_ARCH_HAS_OHCI=y
CONFIG_USB_ARCH_HAS_EHCI=y
# CONFIG_USB is not set

#
# NOTE: USB_STORAGE enables SCSI, and 'SCSI disk support'
#

#
# USB Gadget Support
#
# CONFIG_USB_GADGET is not set

#
# MMC/SD Card support
#
# CONFIG_MMC is not set

#
# LED devices
#
# CONFIG_NEW_LEDS is not set

#
# LED drivers
#

#
# LED Triggers
#

#
# InfiniBand support
#
# CONFIG_INFINIBAND is not set

#
# EDAC - error detection and reporting (RAS) (EXPERIMENTAL)
#

#
# Real Time Clock
#

#
# DMA Engine support
#
CONFIG_DMA_ENGINE=y

#
# DMA Clients
#
CONFIG_NET_DMA=y

#
# DMA Devices
#
# CONFIG_INTEL_IOATDMA is not set

#
# File systems
#
CONFIG_EXT2_FS=y
# CONFIG_EXT2_FS_XATTR is not set
# CONFIG_EXT2_FS_XIP is not set
CONFIG_EXT3_FS=y
# CONFIG_EXT3_FS_XATTR is not set
CONFIG_JBD=y
# CONFIG_JBD_DEBUG is not set
# CONFIG_REISERFS_FS is not set
# CONFIG_JFS_FS is not set
# CONFIG_FS_POSIX_ACL is not set
# CONFIG_XFS_FS is not set
# CONFIG_OCFS2_FS is not set
# CONFIG_MINIX_FS is not set
# CONFIG_ROMFS_FS is not set
# CONFIG_INOTIFY is not set
CONFIG_QUOTA=y
# CONFIG_QFMT_V1 is not set
CONFIG_QFMT_V2=y
CONFIG_QUOTACTL=y
CONFIG_DNOTIFY=y
# CONFIG_AUTOFS_FS is not set
# CONFIG_AUTOFS4_FS is not set
# CONFIG_FUSE_FS is not set

#
# CD-ROM/DVD Filesystems
#
# CONFIG_ISO9660_FS is not set
# CONFIG_UDF_FS is not set

#
# DOS/FAT/NT Filesystems
#
# CONFIG_MSDOS_FS is not set
# CONFIG_VFAT_FS is not set
# CONFIG_NTFS_FS is not set

#
# Pseudo filesystems
#
CONFIG_PROC_FS=y
CONFIG_PROC_SYSCTL=y
CONFIG_SYSFS=y
CONFIG_TMPFS=y
# CONFIG_TMPFS_POSIX_ACL is not set
# CONFIG_HUGETLBFS is not set
# CONFIG_HUGETLB_PAGE is not set
CONFIG_RAMFS=y

#
# Miscellaneous filesystems
#
# CONFIG_HFSPLUS_FS is not set
# CONFIG_CRAMFS is not set
# CONFIG_VXFS_FS is not set
# CONFIG_HPFS_FS is not set
# CONFIG_QNX4FS_FS is not set
# CONFIG_SYSV_FS is not set
# CONFIG_UFS_FS is not set

#
# Network File Systems
#
# CONFIG_NFS_FS is not set
# CONFIG_NFSD is not set
# CONFIG_SMB_FS is not set
# CONFIG_CIFS is not set
# CONFIG_NCP_FS is not set
# CONFIG_CODA_FS is not set

#
# Partition Types
#
# CONFIG_PARTITION_ADVANCED is not set
CONFIG_MSDOS_PARTITION=y

#
# Native Language Support
#
CONFIG_NLS=y
CONFIG_NLS_DEFAULT="cp437"
CONFIG_NLS_CODEPAGE_437=y
CONFIG_NLS_CODEPAGE_737=y
CONFIG_NLS_CODEPAGE_775=y
CONFIG_NLS_CODEPAGE_850=y
CONFIG_NLS_CODEPAGE_852=y
CONFIG_NLS_CODEPAGE_855=y
CONFIG_NLS_CODEPAGE_857=y
CONFIG_NLS_CODEPAGE_860=y
CONFIG_NLS_CODEPAGE_861=y
CONFIG_NLS_CODEPAGE_862=y
CONFIG_NLS_CODEPAGE_863=y
CONFIG_NLS_CODEPAGE_864=y
CONFIG_NLS_CODEPAGE_865=y
CONFIG_NLS_CODEPAGE_866=y
CONFIG_NLS_CODEPAGE_869=y
CONFIG_NLS_CODEPAGE_936=y
CONFIG_NLS_CODEPAGE_950=y
CONFIG_NLS_CODEPAGE_932=y
CONFIG_NLS_CODEPAGE_949=y
CONFIG_NLS_CODEPAGE_874=y
CONFIG_NLS_ISO8859_8=y
CONFIG_NLS_CODEPAGE_1250=y
CONFIG_NLS_CODEPAGE_1251=y
CONFIG_NLS_ASCII=y
CONFIG_NLS_ISO8859_1=y
CONFIG_NLS_ISO8859_2=y
CONFIG_NLS_ISO8859_3=y
CONFIG_NLS_ISO8859_4=y
CONFIG_NLS_ISO8859_5=y
CONFIG_NLS_ISO8859_6=y
CONFIG_NLS_ISO8859_7=y
CONFIG_NLS_ISO8859_9=y
CONFIG_NLS_ISO8859_13=y
CONFIG_NLS_ISO8859_14=y
CONFIG_NLS_ISO8859_15=y
CONFIG_NLS_KOI8_R=y
CONFIG_NLS_KOI8_U=y
CONFIG_NLS_UTF8=y

#
# Kernel hacking
#
CONFIG_TRACE_IRQFLAGS_SUPPORT=y
# CONFIG_PRINTK_TIME is not set
CONFIG_ENABLE_MUST_CHECK=y
CONFIG_MAGIC_SYSRQ=y
# CONFIG_UNUSED_SYMBOLS is not set
# CONFIG_DEBUG_KERNEL is not set
CONFIG_LOG_BUF_SHIFT=14
CONFIG_DEBUG_BUGVERBOSE=y
# CONFIG_DEBUG_FS is not set
# CONFIG_UNWIND_INFO is not set
# CONFIG_HEADERS_CHECK is not set
CONFIG_EARLY_PRINTK=y
CONFIG_X86_FIND_SMP_CONFIG=y
CONFIG_X86_MPPARSE=y
CONFIG_DOUBLEFAULT=y

#
# Security options
#

#
# PaX
#
CONFIG_PAX=y

#
# PaX Control
#
# CONFIG_PAX_SOFTMODE is not set
# CONFIG_PAX_EI_PAX is not set
# CONFIG_PAX_PT_PAX_FLAGS is not set
# CONFIG_PAX_NO_ACL_FLAGS is not set
CONFIG_PAX_HAVE_ACL_FLAGS=y
# CONFIG_PAX_HOOK_ACL_FLAGS is not set

#
# Non-executable pages
#
CONFIG_PAX_NOEXEC=y

#
# Address Space Layout Randomization
#
CONFIG_PAX_ASLR=y
CONFIG_PAX_RANDKSTACK=y
CONFIG_PAX_RANDUSTACK=y
CONFIG_PAX_RANDMMAP=y

#
# Miscellaneous hardening features
#
CONFIG_PAX_MEMORY_SANITIZE=y

#
# Grsecurity
#
CONFIG_GRKERNSEC=y
# CONFIG_GRKERNSEC_LOW is not set
# CONFIG_GRKERNSEC_MEDIUM is not set
# CONFIG_GRKERNSEC_HIGH is not set
CONFIG_GRKERNSEC_CUSTOM=y

#
# Address Space Protection
#
CONFIG_GRKERNSEC_KMEM=y
CONFIG_GRKERNSEC_IO=y
CONFIG_GRKERNSEC_PROC_MEMMAP=y
CONFIG_GRKERNSEC_BRUTE=y
CONFIG_GRKERNSEC_HIDESYM=y

#
# Role Based Access Control Options
#
CONFIG_GRKERNSEC_ACL_HIDEKERN=y
CONFIG_GRKERNSEC_ACL_MAXTRIES=3
CONFIG_GRKERNSEC_ACL_TIMEOUT=30

#
# Filesystem Protections
#
CONFIG_GRKERNSEC_PROC=y
# CONFIG_GRKERNSEC_PROC_USER is not set
CONFIG_GRKERNSEC_PROC_USERGROUP=y
CONFIG_GRKERNSEC_PROC_GID=2523
CONFIG_GRKERNSEC_PROC_ADD=y
CONFIG_GRKERNSEC_LINK=y
CONFIG_GRKERNSEC_FIFO=y
CONFIG_GRKERNSEC_CHROOT=y
CONFIG_GRKERNSEC_CHROOT_MOUNT=y
CONFIG_GRKERNSEC_CHROOT_DOUBLE=y
CONFIG_GRKERNSEC_CHROOT_PIVOT=y
CONFIG_GRKERNSEC_CHROOT_CHDIR=y
CONFIG_GRKERNSEC_CHROOT_CHMOD=y
CONFIG_GRKERNSEC_CHROOT_FCHDIR=y
CONFIG_GRKERNSEC_CHROOT_MKNOD=y
CONFIG_GRKERNSEC_CHROOT_SHMAT=y
CONFIG_GRKERNSEC_CHROOT_UNIX=y
CONFIG_GRKERNSEC_CHROOT_FINDTASK=y
CONFIG_GRKERNSEC_CHROOT_NICE=y
CONFIG_GRKERNSEC_CHROOT_SYSCTL=y
CONFIG_GRKERNSEC_CHROOT_CAPS=y

#
# Kernel Auditing
#
# CONFIG_GRKERNSEC_AUDIT_GROUP is not set
# CONFIG_GRKERNSEC_EXECLOG is not set
CONFIG_GRKERNSEC_RESLOG=y
# CONFIG_GRKERNSEC_CHROOT_EXECLOG is not set
# CONFIG_GRKERNSEC_AUDIT_CHDIR is not set
CONFIG_GRKERNSEC_AUDIT_MOUNT=y
CONFIG_GRKERNSEC_AUDIT_IPC=y
CONFIG_GRKERNSEC_SIGNAL=y
CONFIG_GRKERNSEC_FORKFAIL=y
CONFIG_GRKERNSEC_TIME=y
# CONFIG_GRKERNSEC_PROC_IPADDR is not set

#
# Executable Protections
#
CONFIG_GRKERNSEC_EXECVE=y
CONFIG_GRKERNSEC_SHM=y
CONFIG_GRKERNSEC_DMESG=y
# CONFIG_GRKERNSEC_TPE is not set

#
# Network Protections
#
CONFIG_GRKERNSEC_RANDNET=y
# CONFIG_GRKERNSEC_SOCKET is not set

#
# Sysctl support
#
# CONFIG_GRKERNSEC_SYSCTL is not set

#
# Logging Options
#
CONFIG_GRKERNSEC_FLOODTIME=10
CONFIG_GRKERNSEC_FLOODBURST=4
# CONFIG_KEYS is not set
# CONFIG_SECURITY is not set

#
# Cryptographic options
#
CONFIG_CRYPTO=y
CONFIG_CRYPTO_ALGAPI=y
CONFIG_CRYPTO_MANAGER=y
# CONFIG_CRYPTO_HMAC is not set
# CONFIG_CRYPTO_NULL is not set
# CONFIG_CRYPTO_MD4 is not set
# CONFIG_CRYPTO_MD5 is not set
# CONFIG_CRYPTO_SHA1 is not set
CONFIG_CRYPTO_SHA256=y
# CONFIG_CRYPTO_SHA512 is not set
# CONFIG_CRYPTO_WP512 is not set
# CONFIG_CRYPTO_TGR192 is not set
# CONFIG_CRYPTO_ECB is not set
# CONFIG_CRYPTO_CBC is not set
# CONFIG_CRYPTO_DES is not set
# CONFIG_CRYPTO_BLOWFISH is not set
# CONFIG_CRYPTO_TWOFISH is not set
# CONFIG_CRYPTO_TWOFISH_586 is not set
# CONFIG_CRYPTO_SERPENT is not set
# CONFIG_CRYPTO_AES is not set
# CONFIG_CRYPTO_AES_586 is not set
# CONFIG_CRYPTO_CAST5 is not set
# CONFIG_CRYPTO_CAST6 is not set
# CONFIG_CRYPTO_TEA is not set
# CONFIG_CRYPTO_ARC4 is not set
# CONFIG_CRYPTO_KHAZAD is not set
# CONFIG_CRYPTO_ANUBIS is not set
# CONFIG_CRYPTO_DEFLATE is not set
# CONFIG_CRYPTO_MICHAEL_MIC is not set
# CONFIG_CRYPTO_CRC32C is not set

#
# Hardware crypto devices
#
# CONFIG_CRYPTO_DEV_PADLOCK is not set

#
# Library routines
#
# CONFIG_CRC_CCITT is not set
# CONFIG_CRC16 is not set
# CONFIG_CRC32 is not set
# CONFIG_LIBCRC32C is not set
CONFIG_PLIST=y
CONFIG_GENERIC_HARDIRQS=y
CONFIG_GENERIC_IRQ_PROBE=y
CONFIG_X86_BIOS_REBOOT=y
CONFIG_KTIME_SCALAR=y
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Postby Hal9000 » Fri Jan 19, 2007 11:38 am

this is a more recent problem, involving process apache2...

Code: Select all
Jan 18 15:24:45 fonzie kernel: BUG: unable to handle kernel paging request at virtual address fffaf304
Jan 18 15:24:45 fonzie kernel:  printing eip:
Jan 18 15:24:45 fonzie kernel: c0159210
Jan 18 15:24:45 fonzie kernel: *pgd = 1067
Jan 18 15:24:45 fonzie kernel: *pmd = 1067
Jan 18 15:24:45 fonzie kernel: *pte =    0
Jan 18 15:24:45 fonzie kernel: Oops: 0002 [#12]
Jan 18 15:24:45 fonzie kernel: CPU:    0
Jan 18 15:24:45 fonzie kernel: EIP:    0060:[<c0159210>]    Not tainted VLI
Jan 18 15:24:45 fonzie kernel: EFLAGS: 00210246   (2.6.19.2-grsec #1)
Jan 18 15:24:45 fonzie kernel: eax: 00000000   ebx: 00000001   ecx: 0000033f   edx: c0001ebc
Jan 18 15:24:45 fonzie kernel: esi: c190da40   edi: fffaf304   ebp: c190da40   esp: e5869e14
Jan 18 15:24:45 fonzie kernel: ds: 0068   es: 0068   ss: 0068
Jan 18 15:24:45 fonzie kernel: Process apache2 (pid: 28151, ti=e5868000 task=f78a3030 task.ti=e5868000)
Jan 18 15:24:45 fonzie kernel: Stack: fffaf000 000280d2 00000000 c02e00c8 00200246 c190da40 c02e00c8 c015958f
Jan 18 15:24:45 fonzie kernel:        00200246 00000000 00000000 c02e00c8 c02e022c 00000044 00000002 c015971c
Jan 18 15:24:45 fonzie kernel:        000280d2 00000044 00000000 c02e022c 00000000 000280d2 c02e022c 000280d2
Jan 18 15:24:45 fonzie kernel: Call Trace:
Jan 18 15:24:45 fonzie kernel:  [<c015958f>] <0> [<c015971c>] <0> [<c015978a>] <0> [<c015978a>] <0> [<c01617a0>] <0> [<c0161d09>] <0> [<c0161d09>] <0> [<c013
5c2b>] <0> [<c01428e0>] <0> [<c01428e0>] <0> [<c013e9bc>] <0> [<c0135ab0>] <0> [<c029c6d9>] <0> [<c0129dff>] <0> =======================
Jan 18 15:24:45 fonzie kernel: Code: b6 4c 24 08 b8 01 00 00 00 d3 e0 85 c0 7e 31 89 f5 89 c3 ba 0d 00 00 00 89 e8 e8 2c d8 fd ff b9 00 04 00 00 89 04 24 89
c7 31 c0 <f3> ab 83 c5 20 8b 04 24 ba 0d 00 00 00 e8 9e d8 fd ff 4b 75 d3
Jan 18 15:24:45 fonzie kernel: EIP: [<c0159210>]  SS:ESP 0068:e5869e14
Jan 18 15:24:45 fonzie kernel:  <6>note: apache2[28151] exited with preempt_count 1
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Re: 2.6.19.2-grsec oops?

Postby PaX Team » Mon Jan 22, 2007 4:43 pm

Hal9000 wrote:I just upgraded my box from 2.6.17.11-grsec to 2.6.19.2-grsec
The machine started fine, i dont seem to have any problems, but i am getting these errors in console:
could you decode the oops? it's kinda hard to tell anything without the symbolic info... my initial guess is that it's SANITIZE going wrong somehow, you can try to disable it and see what happens (but figuring out why it fails would still be nice).
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Postby Hal9000 » Mon Jan 22, 2007 5:47 pm

unfortunatelly it's a production machine and I can't experiment that much. I also lack the knowledge of how to decode an oops or get the symbolic info or anything alike...
If there is anything useful I can do please tell me, otherwise I guess I'll have to reboot into the previous kernel :(
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Postby aldee » Mon Jan 22, 2007 6:37 pm

I'm in the same boat, have been observing the very same error since upgrading to 2.6.19.2-grsec. For me, it's the php-cgi binary triggered by apache / suexec sporadically falling over with a "kernel paging request" error looking pretty similar to Hal9000's. Unfortunately I'm also unable to provide a more detailed description than what has already been posted without instructions on how to do so.

I cannot provide instructions for reproducing the error either, it just occurs from time to time ... I haven't been able to trigger it myself, just spotted it in my syslog.

Code: Select all
/var/log/kern.log.2.gz:Jan  7 04:07:27 xena kernel: BUG: unable to handle kernel paging request at virtual address fffaf0c4
/var/log/kern.log.2.gz:Jan  7 04:33:59 xena kernel: BUG: unable to handle kernel paging request at virtual address fffaf7fc
/var/log/kern.log.0:Jan 15 04:20:56 xena kernel: BUG: unable to handle kernel paging request at virtual address fffaf004
/var/log/kern.log.0:Jan 20 13:28:16 xena kernel: BUG: unable to handle kernel paging request at virtual address fffaf714
/var/log/kern.log:Jan 21 11:46:41 xena kernel: BUG: unable to handle kernel paging request at virtual address fffaf394
/var/log/kern.log:Jan 22 04:23:04 xena kernel: BUG: unable to handle kernel paging request at virtual address fffaf6f0

Until I spotted this thread I suspected that it might be related to a bad RAM stick or my kinda quirky setup (my web server is running within a Debian sarge environment changerooted under a Debian etch base system). The problem did not occur with 2.6.18-grsec.

I know, that's probably not overly helpful.
aldee
 
Posts: 25
Joined: Tue Aug 15, 2006 11:41 am

Postby PaX Team » Mon Jan 22, 2007 6:58 pm

Hal9000 wrote:unfortunatelly it's a production machine and I can't experiment that much. I also lack the knowledge of how to decode an oops or get the symbolic info or anything alike...
If there is anything useful I can do please tell me, otherwise I guess I'll have to reboot into the previous kernel :(
check out ksymoops or enable CONFIG_KALLSYMS=y. other than that, disable SANITIZE for now, i think that's the problem, even though i don't see yet what changed in .19 that would cause this (having the backtrace from the oops would hopefully point the finger at something).
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Postby Hal9000 » Mon Jan 22, 2007 7:31 pm

Code: Select all
>>EIP; c0159210 No symbols available   <=====

Trace; c015958f No symbols available

Code;  c0159210 No symbols available
00000000 <_EIP>:
Code;  c0159210 No symbols available   <=====
   0:   b6 4c                     mov    $0x4c,%dh   <=====
Code;  c0159212 No symbols available
   2:   24 08                     and    $0x8,%al
Code;  c0159214 No symbols available
   4:   b8 01 00 00 00            mov    $0x1,%eax
Code;  c0159219 No symbols available
   9:   d3 e0                     shl    %cl,%eax
Code;  c015921b No symbols available
   b:   85 c0                     test   %eax,%eax
Code;  c015921d No symbols available
   d:   7e 31                     jle    40 <_EIP+0x40>
Code;  c015921f No symbols available
   f:   89 f5                     mov    %esi,%ebp
Code;  c0159221 No symbols available
  11:   89 c3                     mov    %eax,%ebx
Code;  c0159223 No symbols available
  13:   ba 0d 00 00 00            mov    $0xd,%edx
Code;  c0159228 No symbols available
  18:   89 e8                     mov    %ebp,%eax
Code;  c015922a No symbols available
  1a:   e8 2c d8 fd ff            call   fffdd84b <_EIP+0xfffdd84b>
Code;  c015922f No symbols available
  1f:   b9 00 04 00 00            mov    $0x400,%ecx
Code;  c0159234 No symbols available
  24:   89 04 24                  mov    %eax,(%esp)
Code;  c0159237 No symbols available
  27:   89 00                     mov    %eax,(%eax)

EIP: [<c0159210>]  SS:ESP 0068:de10de6c
Warning (Oops_read): Code line not seen, dumping what data is available


>>EIP; c0159210 No symbols available   <=====


3 warnings and 2 errors issued.  Results may not be reliable.


ehm... no idea if i did it correctly and if this is useable...
btw i have an AMD Opteron 148 processor, 32 bit Debian 3.1
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Postby Hal9000 » Thu Jan 25, 2007 1:36 pm

ok last night i recompiled the 2.6.19.2 kernel with the newest grsec patch and disabled the memory sanitizing feature from pax and rebooted the machine, it now works fine without giving oopses anymore...
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Postby PaX Team » Tue Jan 30, 2007 6:43 pm

Hal9000 wrote:ok last night i recompiled the 2.6.19.2 kernel with the newest grsec patch and disabled the memory sanitizing feature from pax and rebooted the machine, it now works fine without giving oopses anymore...
ok, in the meantime i got a decoded oops and i think i figured it out, new patches are out, can you test them please (interdiff should apply to grsec as well)?
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Postby aldee » Tue Jan 30, 2007 7:40 pm

Excuse my utter ignorance, but where would one find that updated version? I had no luck on the main page and ~spender. The CVS repository doesn't seem to be maintained any longer either.
aldee
 
Posts: 25
Joined: Tue Aug 15, 2006 11:41 am

Postby spender » Tue Jan 30, 2007 11:13 pm

http://grsecurity.net/~paxguy1/


I'll also have updated grsecurity patches soon.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Postby spender » Wed Feb 07, 2007 10:21 pm

The new patches have been uploaded.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Postby Hal9000 » Wed Apr 11, 2007 3:54 pm

patched 2.6.19.7 with latest official released patch, the problem is still there.

Code: Select all
Apr 11 14:28:13 lnx01 kernel: BUG: unable to handle kernel paging request at virtual address fffaf704
Apr 11 14:28:13 lnx01 kernel:  printing eip:
Apr 11 14:28:13 lnx01 kernel: c016bf00
Apr 11 14:28:13 lnx01 kernel: *pgd = 3067
Apr 11 14:28:13 lnx01 kernel: *pmd = 3067
Apr 11 14:28:13 lnx01 kernel: *pte =    0
Apr 11 14:28:13 lnx01 kernel: Oops: 0002 [#1]
Apr 11 14:28:13 lnx01 kernel: SMP
Apr 11 14:28:13 lnx01 kernel: CPU:    0
Apr 11 14:28:13 lnx01 kernel: EIP:    0060:[<c016bf00>]    Not tainted VLI
Apr 11 14:28:13 lnx01 kernel: EFLAGS: 00010246   (2.6.19.7-grsec #1)
Apr 11 14:28:13 lnx01 kernel: eax: 00000000   ebx: 00000001   ecx: 0000023f   edx: c0003ebc
Apr 11 14:28:13 lnx01 kernel: esi: c1df90e0   edi: fffaf704   ebp: c1df90e0   esp: f6537bec
Apr 11 14:28:13 lnx01 kernel: ds: 0068   es: 0068   ss: 0068
Apr 11 14:28:13 lnx01 kernel: Process egrep (pid: 7832, ti=f6536000 task=c210e560 task.ti=f6536000)
Apr 11 14:28:13 lnx01 kernel: Stack: fffaf000 000280d2 00000000 00000001 00000246 c0309940 c1df90e0 c016c2de
Apr 11 14:28:13 lnx01 kernel:        c1df9c40 00000002 00000000 00000000 c0309940 c0309ba0 00000044 00000002
Apr 11 14:28:13 lnx01 kernel:        c016c46c 000280d2 00000044 00000000 c0309ba0 00000000 000280d2 c0309ba0
Apr 11 14:28:13 lnx01 kernel: Call Trace:
Apr 11 14:28:13 lnx01 kernel:  [<c016c2de>] <0> [<c016c46c>] <0> [<c016c4da>] <0> [<c01752b2>] <0> [<c01758d0>] <0> [<c0141dfb>] <0> [<c0141c80>] <0> [<c02c4
199>] <0> [<c016894c>] <0> [<c0168798>] <0> [<c0168bd5>] <0> [<c0168920>] <0> [<c0185522>] <0> [<c015da50>] <0> [<c01774dc>] <0> [<c01855f3>] <0> [<c01858a7>
] <0> [<c0132ff4>] <0> =======================
Apr 11 14:28:13 lnx01 kernel: Code: b6 4c 24 08 b8 01 00 00 00 d3 e0 85 c0 7e 31 89 f5 89 c3 ba 0d 00 00 00 89 e8 e8 bc 6d fd ff b9 00 04 00 00 89 04 24 89 c
7 31 c0 <f3> ab 83 c5 20 8b 04 24 ba 0d 00 00 00 e8 2e 6e fd ff 4b 75 d3
Apr 11 14:28:13 lnx01 kernel: EIP: [<c016bf00>]  SS:ESP 0068:f6537bec
Apr 11 14:28:13 lnx01 kernel:  <6>note: egrep[7832] exited with preempt_count 1
Apr 11 14:28:26 lnx01 kernel: BUG: unable to handle kernel paging request at virtual address fffa14c8
Apr 11 14:28:26 lnx01 kernel:  printing eip:
Apr 11 14:28:26 lnx01 kernel: c016bf00
Apr 11 14:28:26 lnx01 kernel: *pgd = 3067
Apr 11 14:28:26 lnx01 kernel: *pmd = 3067
Apr 11 14:28:26 lnx01 kernel: *pte =    0
Apr 11 14:28:26 lnx01 kernel: Oops: 0002 [#2]
Apr 11 14:28:26 lnx01 kernel: SMP
Apr 11 14:28:26 lnx01 kernel: CPU:    1
Apr 11 14:28:26 lnx01 kernel: EIP:    0060:[<c016bf00>]    Not tainted VLI
Apr 11 14:28:26 lnx01 kernel: EFLAGS: 00010246   (2.6.19.7-grsec #1)
Apr 11 14:28:26 lnx01 kernel: eax: 00000000   ebx: 00000001   ecx: 000002ce   edx: c0003e84
Apr 11 14:28:26 lnx01 kernel: esi: c1dfad00   edi: fffa14c8   ebp: c1dfad00   esp: f667be38
Apr 11 14:28:26 lnx01 kernel: ds: 0068   es: 0068   ss: 0068
Apr 11 14:28:26 lnx01 kernel: Process lsattr (pid: 16726, ti=f667a000 task=f6bed030 task.ti=f667a000)
Apr 11 14:28:26 lnx01 kernel: Stack: fffa1000 000280d2 00000000 00000001 00000246 c0309940 c1dfad00 c016c2de
Apr 11 14:28:26 lnx01 kernel:        f7c6a944 00000002 00000000 00000000 c0309940 c0309ba0 00000044 00000002
Apr 11 14:28:26 lnx01 kernel:        c016c46c 000280d2 00000044 00000000 c0309ba0 00000000 000280d2 c0309ba0
Apr 11 14:28:26 lnx01 kernel: Call Trace:
Apr 11 14:28:26 lnx01 kernel:  [<c016c2de>] <0> [<c016c46c>] <0> [<c016c4da>] <0> [<c01752b2>] <0> [<c01758d0>] <0> [<c0141dfb>] <0> [<c01381f3>] <0> [<c0141
c80>] <0> [<c02c4199>] <0> =======================
Apr 11 14:28:26 lnx01 kernel: Code: b6 4c 24 08 b8 01 00 00 00 d3 e0 85 c0 7e 31 89 f5 89 c3 ba 0d 00 00 00 89 e8 e8 bc 6d fd ff b9 00 04 00 00 89 04 24 89 c
7 31 c0 <f3> ab 83 c5 20 8b 04 24 ba 0d 00 00 00 e8 2e 6e fd ff 4b 75 d3
Apr 11 14:28:26 lnx01 kernel: EIP: [<c016bf00>]  SS:ESP 0068:f667be38
Apr 11 14:28:26 lnx01 kernel:  <6>note: lsattr[16726] exited with preempt_count 1
Apr 11 14:28:28 lnx01 kernel: BUG: unable to handle kernel paging request at virtual address fffafa04
Apr 11 14:28:28 lnx01 kernel:  printing eip:
Apr 11 14:28:28 lnx01 kernel: c016bf00
Apr 11 14:28:28 lnx01 kernel: *pgd = 3067
Apr 11 14:28:28 lnx01 kernel: *pmd = 3067
Apr 11 14:28:28 lnx01 kernel: *pte =    0
Apr 11 14:28:28 lnx01 kernel: Oops: 0002 [#3]
Apr 11 14:28:28 lnx01 kernel: SMP
Apr 11 14:28:28 lnx01 kernel: CPU:    0
Apr 11 14:28:28 lnx01 kernel: EIP:    0060:[<c016bf00>]    Not tainted VLI
Apr 11 14:28:28 lnx01 kernel: EFLAGS: 00010246   (2.6.19.7-grsec #1)
Apr 11 14:28:28 lnx01 kernel: eax: 00000000   ebx: 00000001   ecx: 0000017f   edx: c0003ebc
Apr 11 14:28:28 lnx01 kernel: esi: c1dfb940   edi: fffafa04   ebp: c1dfb940   esp: f664be60
Apr 11 14:28:28 lnx01 kernel: ds: 0068   es: 0068   ss: 0068
Apr 11 14:28:28 lnx01 kernel: Process date (pid: 18446, ti=f664a000 task=f654b560 task.ti=f664a000)
Apr 11 14:28:28 lnx01 kernel: Stack: fffaf000 000280d2 00000000 00000001 00000246 c0309940 c1dfb940 c016c2de
Apr 11 14:28:28 lnx01 kernel:        c0309ba0 00000002 00000000 00000000 c0309940 c0309ba0 00000044 00000002
Apr 11 14:28:28 lnx01 kernel:        c016c46c 000280d2 00000044 00000000 c0309ba0 00000000 000280d2 c0309ba0
Apr 11 14:28:28 lnx01 kernel: Call Trace:
Apr 11 14:28:28 lnx01 kernel:  [<c016c2de>] <0> [<c016c46c>] <0> [<c016c4da>] <0> [<c0174892>] <0> [<c01752b2>] <0> [<c01758d0>] <0> [<c0141dfb>] <0> [<c0141
c80>] <0> [<c02c4199>] <0> =======================
Apr 11 14:28:28 lnx01 kernel: Code: b6 4c 24 08 b8 01 00 00 00 d3 e0 85 c0 7e 31 89 f5 89 c3 ba 0d 00 00 00 89 e8 e8 bc 6d fd ff b9 00 04 00 00 89 04 24 89 c
7 31 c0 <f3> ab 83 c5 20 8b 04 24 ba 0d 00 00 00 e8 2e 6e fd ff 4b 75 d3
Apr 11 14:28:28 lnx01 kernel: EIP: [<c016bf00>]  SS:ESP 0068:f664be60
Apr 11 14:28:28 lnx01 kernel:  <6>note: date[18446] exited with preempt_count 1
Apr 11 14:28:36 lnx01 kernel: BUG: unable to handle kernel paging request at virtual address fffa13f4
Apr 11 14:28:36 lnx01 kernel:  printing eip:
Apr 11 14:28:36 lnx01 kernel: c016bf00
Apr 11 14:28:36 lnx01 kernel: *pgd = 3067
Apr 11 14:28:36 lnx01 kernel: *pmd = 3067
Apr 11 14:28:36 lnx01 kernel: *pte =    0
Apr 11 14:28:36 lnx01 kernel: Oops: 0002 [#4]
Apr 11 14:28:36 lnx01 kernel: SMP
Apr 11 14:28:36 lnx01 kernel: CPU:    1
Apr 11 14:28:36 lnx01 kernel: EIP:    0060:[<c016bf00>]    Not tainted VLI
Apr 11 14:28:36 lnx01 kernel: EFLAGS: 00010246   (2.6.19.7-grsec #1)
Apr 11 14:28:36 lnx01 kernel: eax: 00000000   ebx: 00000001   ecx: 00000303   edx: c0003e84
Apr 11 14:28:36 lnx01 kernel: esi: c1e05360   edi: fffa13f4   ebp: c1e05360   esp: f66abe60
Apr 11 14:28:36 lnx01 kernel: ds: 0068   es: 0068   ss: 0068
Apr 11 14:28:36 lnx01 kernel: Process date (pid: 23040, ti=f66aa000 task=f6508030 task.ti=f66aa000)
Apr 11 14:28:36 lnx01 kernel: Stack: fffa1000 000280d2 00000000 00000001 00000246 c0309940 c1e05360 c016c2de
Apr 11 14:28:36 lnx01 kernel:        00000000 00000002 00000000 00000000 c0309940 c0309ba0 00000044 00000002
Apr 11 14:28:36 lnx01 kernel:        c016c46c 000280d2 00000044 00000000 c0309ba0 00000000 000280d2 c0309ba0
Apr 11 14:28:36 lnx01 kernel: Call Trace:
Apr 11 14:28:36 lnx01 kernel:  [<c016c2de>] <0> [<c016c46c>] <0> [<c016c4da>] <0> [<c01752b2>] <0> [<c01758d0>] <0> [<c0141dfb>] <0> [<c0185606>] <0> [<c0133
00d>] <0> [<c0141c80>] <0> [<c02c4199>] <0> =======================
Apr 11 14:28:36 lnx01 kernel: Code: b6 4c 24 08 b8 01 00 00 00 d3 e0 85 c0 7e 31 89 f5 89 c3 ba 0d 00 00 00 89 e8 e8 bc 6d fd ff b9 00 04 00 00 89 04 24 89 c
7 31 c0 <f3> ab 83 c5 20 8b 04 24 ba 0d 00 00 00 e8 2e 6e fd ff 4b 75 d3
Apr 11 14:28:36 lnx01 kernel: EIP: [<c016bf00>]  SS:ESP 0068:f66abe60
Apr 11 14:28:36 lnx01 kernel:  <6>note: date[23040] exited with preempt_count 1
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Postby PaX Team » Sat Apr 14, 2007 12:15 pm

Hal9000 wrote:patched 2.6.19.7 with latest official released patch, the problem is still there.
the last patch for 2.6.19 doesn't have the fix, only 2.6.20 does (we've moved away from .19 since so it won't be fixed).
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Postby Hal9000 » Sat Apr 14, 2007 3:38 pm

heh sorry, my mistake :)
Hal9000
 
Posts: 78
Joined: Wed Jun 16, 2004 2:40 am

Next

Return to grsecurity support