Below the diff between a working kernel (my standard kernel with PAX) and the above mentioned kernel.
I was planning on first trying all GRSEC features like in the crashing kernel then all PAX-features.
Then narrowing it down to trigger the bug. But I can't do anything before tonight.
- Code: Select all
$ diff config-2.6.29.6 /var/www/grsec/config-2.6.29.6-bugtest
4c4
< # Mon Jul 20 23:08:04 2009
---
> # Mon Jul 20 21:41:49 2009
127a128
> # CONFIG_SLABINFO is not set
295a297
> # CONFIG_COMPAT_VDSO is not set
2024a2027
> # CONFIG_PROC_KCORE is not set
2198d2200
< CONFIG_GRKERNSEC_PROC_MEMMAP=y
2216,2218c2218
< CONFIG_GRKERNSEC_PROC_USERGROUP=y
< CONFIG_GRKERNSEC_PROC_GID=2001
< CONFIG_GRKERNSEC_PROC_ADD=y
---
> # CONFIG_GRKERNSEC_PROC_USERGROUP is not set
2229c2229
< CONFIG_GRKERNSEC_CHROOT_SHMAT=y
---
> # CONFIG_GRKERNSEC_CHROOT_SHMAT is not set
2239,2244c2239,2243
< CONFIG_GRKERNSEC_AUDIT_GROUP=y
< CONFIG_GRKERNSEC_AUDIT_GID=2007
< CONFIG_GRKERNSEC_EXECLOG=y
< CONFIG_GRKERNSEC_RESLOG=y
< CONFIG_GRKERNSEC_CHROOT_EXECLOG=y
< CONFIG_GRKERNSEC_AUDIT_CHDIR=y
---
> # CONFIG_GRKERNSEC_AUDIT_GROUP is not set
> # CONFIG_GRKERNSEC_EXECLOG is not set
> # CONFIG_GRKERNSEC_RESLOG is not set
> # CONFIG_GRKERNSEC_CHROOT_EXECLOG is not set
> # CONFIG_GRKERNSEC_AUDIT_CHDIR is not set
2246,2247c2245,2246
< CONFIG_GRKERNSEC_AUDIT_IPC=y
< CONFIG_GRKERNSEC_SIGNAL=y
---
> # CONFIG_GRKERNSEC_AUDIT_IPC is not set
> # CONFIG_GRKERNSEC_SIGNAL is not set
2251d2249
< # CONFIG_GRKERNSEC_AUDIT_TEXTREL is not set
2256c2254
< CONFIG_GRKERNSEC_EXECVE=y
---
> # CONFIG_GRKERNSEC_EXECVE is not set
2258,2261c2256
< CONFIG_GRKERNSEC_TPE=y
< CONFIG_GRKERNSEC_TPE_ALL=y
< CONFIG_GRKERNSEC_TPE_INVERT=y
< CONFIG_GRKERNSEC_TPE_GID=2005
---
> # CONFIG_GRKERNSEC_TPE is not set
2267,2274c2262,2263
< CONFIG_GRKERNSEC_BLACKHOLE=y
< CONFIG_GRKERNSEC_SOCKET=y
< CONFIG_GRKERNSEC_SOCKET_ALL=y
< CONFIG_GRKERNSEC_SOCKET_ALL_GID=2004
< CONFIG_GRKERNSEC_SOCKET_CLIENT=y
< CONFIG_GRKERNSEC_SOCKET_CLIENT_GID=2003
< CONFIG_GRKERNSEC_SOCKET_SERVER=y
< CONFIG_GRKERNSEC_SOCKET_SERVER_GID=2002
---
> # CONFIG_GRKERNSEC_BLACKHOLE is not set
> # CONFIG_GRKERNSEC_SOCKET is not set
2291,2318c2280
< CONFIG_PAX=y
<
< #
< # PaX Control
< #
< CONFIG_PAX_SOFTMODE=y
< CONFIG_PAX_EI_PAX=y
< CONFIG_PAX_PT_PAX_FLAGS=y
< CONFIG_PAX_NO_ACL_FLAGS=y
< # CONFIG_PAX_HAVE_ACL_FLAGS is not set
< # CONFIG_PAX_HOOK_ACL_FLAGS is not set
<
< #
< # Non-executable pages
< #
< CONFIG_PAX_NOEXEC=y
< CONFIG_PAX_PAGEEXEC=y
< # CONFIG_PAX_EMUTRAMP is not set
< CONFIG_PAX_MPROTECT=y
< # CONFIG_PAX_NOELFRELOCS is not set
< CONFIG_PAX_KERNEXEC=y
<
< #
< # Address Space Layout Randomization
< #
< CONFIG_PAX_ASLR=y
< CONFIG_PAX_RANDUSTACK=y
< CONFIG_PAX_RANDMMAP=y
---
> # CONFIG_PAX is not set
2323,2326c2285,2288
< CONFIG_PAX_MEMORY_SANITIZE=y
< CONFIG_PAX_REFCOUNT=y
< CONFIG_PAX_USERCOPY=y
< CONFIG_PAX_SECURE_VSYSCALL=y
---
> # CONFIG_PAX_MEMORY_SANITIZE is not set
> # CONFIG_PAX_REFCOUNT is not set
> # CONFIG_PAX_USERCOPY is not set
> # CONFIG_PAX_SECURE_VSYSCALL is not set
.