System painfully slow on 2.6.24.5

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

System painfully slow on 2.6.24.5

Postby cmouse » Thu Jun 05, 2008 12:47 pm

It seems that for some reason my system became painfully slow after upgrading. Everything is horribly slow and merely compiling new kernel to disable most likely suspect (PAX memory feature) seems to take forever. It seems to compile with average speed of 1 file per 5 seconds.

patched with: grsecurity-2.1.11-2.6.24.5-200804211829

# more /proc/cpuinfo
processor : 0
vendor_id : GenuineIntel
cpu family : 15
model : 2
model name : Intel(R) Pentium(R) 4 CPU 2.40GHz
stepping : 9
cpu MHz : 2394.250
cache size : 512 KB
physical id : 0
siblings : 1
core id : 0
cpu cores : 1
fdiv_bug : no
hlt_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 2
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic mtrr pge mca cmov pat
pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe up pebs bts sync_rdtsc cid
xtpr
bogomips : 4790.66
clflush size : 64

Kernel config (for PAX, I can provide more if asked)
CONFIG_PAX=y
# CONFIG_PAX_SOFTMODE is not set
CONFIG_PAX_EI_PAX=y
CONFIG_PAX_PT_PAX_FLAGS=y
# CONFIG_PAX_NO_ACL_FLAGS is not set
CONFIG_PAX_HAVE_ACL_FLAGS=y
# CONFIG_PAX_HOOK_ACL_FLAGS is not set
CONFIG_PAX_NOEXEC=y
CONFIG_PAX_PAGEEXEC=y
# CONFIG_PAX_SEGMEXEC is not set
CONFIG_PAX_EMUTRAMP=y
# CONFIG_PAX_MPROTECT is not set
CONFIG_PAX_KERNEXEC=y
CONFIG_PAX_ASLR=y
CONFIG_PAX_RANDKSTACK=y
CONFIG_PAX_RANDUSTACK=y
CONFIG_PAX_RANDMMAP=y
# CONFIG_PAX_MEMORY_SANITIZE is not set
CONFIG_PAX_MEMORY_UDEREF=y
cmouse
 
Posts: 98
Joined: Tue Dec 17, 2002 10:58 am

Re: System painfully slow on 2.6.24.5

Postby cmouse » Thu Jun 05, 2008 1:15 pm

And disabled non-executable memory protection features and now everything works as normal.
cmouse
 
Posts: 98
Joined: Tue Dec 17, 2002 10:58 am

Re: System painfully slow on 2.6.24.5

Postby PaX Team » Thu Jun 05, 2008 3:10 pm

cmouse wrote:It seems that for some reason my system became painfully slow after upgrading. Everything is horribly slow and merely compiling new kernel to disable most likely suspect (PAX memory feature) seems to take forever. It seems to compile with average speed of 1 file per 5 seconds.

patched with: grsecurity-2.1.11-2.6.24.5-200804211829

model name : Intel(R) Pentium(R) 4 CPU 2.40GHz

CONFIG_PAX_PAGEEXEC=y
# CONFIG_PAX_SEGMEXEC is not set
have you read the config help about PAGEEXEC's impact on P4 (no-NX bit)?
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: System painfully slow on 2.6.24.5

Postby cmouse » Fri Jun 06, 2008 12:23 am

No, but I will now.
cmouse
 
Posts: 98
Joined: Tue Dec 17, 2002 10:58 am


Return to grsecurity support