Fedora core 6, grsec problem

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Fedora core 6, grsec problem

Postby urbiusz » Mon Mar 19, 2007 3:25 pm

I have celeron 900 mhz +512mem , 40hdd wd, 2 net cards.
I have this error form kernel 2.6.18.2 to 2.6.19.3
I can compile kernel with patch without any problems, but after restart , kernel panic:

*pte = 349161
Oops: 0003 [#1]
SMP
Modules linked in:
CPU: 0
EIP: 0060:[<c013df19>] Not tainted VLI
EFLAGS: 00010046 (2.6.19.3-grsec #1)
eax: c0349000 ebx: dfcce820 ecx: c03ca780 edx: 00000000
esi: dfc815b0 edi: dfcce650 ebp: dfc81780 esp: dfd17fa0
ds: 0068 es: 0068 ss: 0068
Process khelper (pid: 276, ti=dfd17000 task=dfcce650 task.ti=dfd17000)
Stack: dfcce650 c03ca780 c141b240 c08ca800 c14bdd20 c013ee50 c0168f47
00000000 dfec2ed0 00000000 00000000 00000000 00000000 00000068 00000068
ffffffff c0140180 00000068 00000286 00000000 00000000 00000000 00000000
Call Trace:
[<c013ee50>] <0>
Leftover inexact backtrace:

[<c0140180>] <0> ==================
Code: 41 10 39 d0 74 10 66 89 51 10 b9 74 01 00 00 8b 43 1c 31 d2 0f 30 8c 65 28 8c 6d 2c c1 e7 0c 8b 53 04 8d 87 00 98 34 c0 8b 3c 24 <89> 50 34 8b 53 0c 8b 8f d0 01 00 00 89 50 3c 8b 53 14 89 48 30
EIP: [<c013df19>] SS:ESP 0068:dfd17fa0

_


any ideas??
urbiusz
 
Posts: 22
Joined: Sun Aug 08, 2004 11:29 am

Re: Fedora core 6, grsec problem

Postby PaX Team » Mon Mar 19, 2007 6:08 pm

urbiusz wrote:I have celeron 900 mhz +512mem , 40hdd wd, 2 net cards.
I have this error form kernel 2.6.18.2 to 2.6.19.3
I can compile kernel with patch without any problems, but after restart , kernel panic:
you probably have DEBUG_RODATA enabled, it's not compatible with PaX, you should use KERNEXEC if you really need enforced kernel read-only stuff (and a lot more that KERNEXEC provides), or just don't enable that feature.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Postby urbiusz » Thu Mar 22, 2007 4:18 pm

thx , works fine now. You're the men! :)
urbiusz
 
Posts: 22
Joined: Sun Aug 08, 2004 11:29 am


Return to grsecurity support

cron