gradm crashes

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

gradm crashes

Postby jongavne » Thu Feb 22, 2007 12:57 pm

Is anybody else seeing his?

Gradm crashes when I try to enable.
Feb 21 20:10:49 unix kernel: grsec: From xxx.xxx.xxx.xxx: signal 11 sent to
/opt/linux/gradm[gradm:16707] uid/euid:0/0 gid/egid:0/0, parent
/bin/bash[bash:1942] uid/euid:0/0 gid/egid:0/0

I'm running Linux with bash.
Thank you,

-- jon
jongavne
 
Posts: 2
Joined: Thu Feb 22, 2007 12:52 pm

Postby jongavne » Thu Feb 22, 2007 1:28 pm

Dr Neal,

There seem to be another bug in this product.
I found someone else with a similar problem.
http://grsecurity.net/pipermail/grsecur ... 00340.html

How can we trust a security product which causes segmentation fault? Segmentation fault generally means the program can be exploited and arbitrary users can gain root privileges.
jongavne
 
Posts: 2
Joined: Thu Feb 22, 2007 12:52 pm

Postby spender » Fri Feb 23, 2007 7:04 pm

Please download the following gradm:

http://grsecurity.net/~spender/gradm-2. ... 759.tar.gz

Modify the makefile so that the line:
CFLAGS := $(OPT_FLAGS) -DGRSEC_DIR=\"$(GRSEC_DIR)\"

becomes:
CFLAGS := $(OPT_FLAGS) -DGRADM_DEBUG -ggdb -DGRSEC_DIR=\"$(GRSEC_DIR)\"

Also, change both occurrences of -O2 on the OPT_FLAGS line to -O0
(the capital letter O and the number zero)

Run ulimit -c unlimited (to allow for coredumps)
Run ./gradm directly from the source directory; do not install it.

Mail the coredump generated from the crash to spender@grsecurity.net

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to grsecurity support