1 |
I started getting these messages after an upgrade from |
2 |
hardened-sources-2.6.20-r10 to 2.6.22.r8. Nothing changed from the old |
3 |
config. I just did "make oldconfig" and answered N to everything since |
4 |
they weren't relevant. In particular, nothing in PAX or GrSec menus |
5 |
were changed, though whenever I get big nasty messages like this I |
6 |
suspect one of them. Can anyone give me some direction as to how to fix |
7 |
this or what might be causing it? I can post the full configs if need be. |
8 |
|
9 |
Thanks, |
10 |
Brian |
11 |
|
12 |
# dmesg |
13 |
|
14 |
Oct 29 21:30:14 tux-mc Bad page state in process 'cactid' |
15 |
Oct 29 21:30:14 tux-mc page:c1467da0 flags:0x40000001 mapping:00000000 |
16 |
mapcount:0 count:0 |
17 |
Oct 29 21:30:14 tux-mc Trying to fix it up, but a reboot is needed |
18 |
Oct 29 21:30:14 tux-mc Backtrace: |
19 |
Oct 29 21:30:14 tux-mc [<c044a16f>] [<c044ab14>] [<c0453e2c>] |
20 |
[<c045512c>] [<c04145ba>] [<c04319d2>] [<c0432ad3>] [<c04212d3>] |
21 |
[<c04143e0>] [<c06e5e65>] [<c06e007b>] [<c06e0000>] [<c0402a98>] |
22 |
======================= |
23 |
Oct 29 21:30:15 tux-mc Bad page state in process 'cactid' |
24 |
Oct 29 21:30:15 tux-mc page:c159a480 flags:0x40000001 mapping:00000000 |
25 |
mapcount:0 count:0 |
26 |
Oct 29 21:30:15 tux-mc Trying to fix it up, but a reboot is needed |
27 |
Oct 29 21:30:15 tux-mc Backtrace: |
28 |
Oct 29 21:30:15 tux-mc [<c044a16f>] [<c044ab14>] [<c0453e2c>] |
29 |
[<c045512c>] [<c04145ba>] [<c06c995a>] [<c04143e0>] [<c06e5e65>] |
30 |
[<c046007b>] [<c06e0000>] ======================= |
31 |
|
32 |
|
33 |
|
34 |
# uname -a |
35 |
|
36 |
Linux tux-mc 2.6.22-hardened-r8 #1 SMP Mon Oct 29 21:05:58 CDT 2007 i686 |
37 |
Intel(R) Xeon(TM) CPU 2.80GHz GenuineIntel GNU/Linux |
38 |
|
39 |
|
40 |
# some .config sections |
41 |
|
42 |
# |
43 |
# Security options |
44 |
# |
45 |
|
46 |
# |
47 |
# Grsecurity |
48 |
# |
49 |
CONFIG_GRKERNSEC=y |
50 |
# CONFIG_GRKERNSEC_LOW is not set |
51 |
# CONFIG_GRKERNSEC_MEDIUM is not set |
52 |
# CONFIG_GRKERNSEC_HIGH is not set |
53 |
# CONFIG_GRKERNSEC_HARDENED is not set |
54 |
CONFIG_GRKERNSEC_CUSTOM=y |
55 |
|
56 |
# |
57 |
# Address Space Protection |
58 |
# |
59 |
CONFIG_GRKERNSEC_KMEM=y |
60 |
CONFIG_GRKERNSEC_IO=y |
61 |
CONFIG_GRKERNSEC_PROC_MEMMAP=y |
62 |
CONFIG_GRKERNSEC_BRUTE=y |
63 |
CONFIG_GRKERNSEC_MODSTOP=y |
64 |
CONFIG_GRKERNSEC_HIDESYM=y |
65 |
|
66 |
# |
67 |
# Role Based Access Control Options |
68 |
# |
69 |
CONFIG_GRKERNSEC_ACL_HIDEKERN=y |
70 |
CONFIG_GRKERNSEC_ACL_MAXTRIES=3 |
71 |
CONFIG_GRKERNSEC_ACL_TIMEOUT=30 |
72 |
|
73 |
# |
74 |
# Filesystem Protections |
75 |
# |
76 |
CONFIG_GRKERNSEC_PROC=y |
77 |
CONFIG_GRKERNSEC_PROC_USER=y |
78 |
CONFIG_GRKERNSEC_PROC_ADD=y |
79 |
CONFIG_GRKERNSEC_LINK=y |
80 |
CONFIG_GRKERNSEC_FIFO=y |
81 |
CONFIG_GRKERNSEC_CHROOT=y |
82 |
CONFIG_GRKERNSEC_CHROOT_MOUNT=y |
83 |
CONFIG_GRKERNSEC_CHROOT_DOUBLE=y |
84 |
CONFIG_GRKERNSEC_CHROOT_PIVOT=y |
85 |
CONFIG_GRKERNSEC_CHROOT_CHDIR=y |
86 |
CONFIG_GRKERNSEC_CHROOT_CHMOD=y |
87 |
CONFIG_GRKERNSEC_CHROOT_FCHDIR=y |
88 |
CONFIG_GRKERNSEC_CHROOT_MKNOD=y |
89 |
CONFIG_GRKERNSEC_CHROOT_SHMAT=y |
90 |
CONFIG_GRKERNSEC_CHROOT_UNIX=y |
91 |
CONFIG_GRKERNSEC_CHROOT_FINDTASK=y |
92 |
CONFIG_GRKERNSEC_CHROOT_NICE=y |
93 |
CONFIG_GRKERNSEC_CHROOT_SYSCTL=y |
94 |
CONFIG_GRKERNSEC_CHROOT_CAPS=y |
95 |
|
96 |
# |
97 |
# Kernel Auditing |
98 |
# |
99 |
CONFIG_GRKERNSEC_AUDIT_GROUP=y |
100 |
CONFIG_GRKERNSEC_AUDIT_GID=10005 |
101 |
CONFIG_GRKERNSEC_EXECLOG=y |
102 |
CONFIG_GRKERNSEC_RESLOG=y |
103 |
CONFIG_GRKERNSEC_CHROOT_EXECLOG=y |
104 |
CONFIG_GRKERNSEC_AUDIT_CHDIR=y |
105 |
CONFIG_GRKERNSEC_AUDIT_MOUNT=y |
106 |
CONFIG_GRKERNSEC_AUDIT_IPC=y |
107 |
CONFIG_GRKERNSEC_SIGNAL=y |
108 |
CONFIG_GRKERNSEC_FORKFAIL=y |
109 |
CONFIG_GRKERNSEC_TIME=y |
110 |
CONFIG_GRKERNSEC_PROC_IPADDR=y |
111 |
# CONFIG_GRKERNSEC_AUDIT_TEXTREL is not set |
112 |
|
113 |
# |
114 |
# Executable Protections |
115 |
# |
116 |
CONFIG_GRKERNSEC_EXECVE=y |
117 |
CONFIG_GRKERNSEC_SHM=y |
118 |
CONFIG_GRKERNSEC_DMESG=y |
119 |
CONFIG_GRKERNSEC_TPE=y |
120 |
CONFIG_GRKERNSEC_TPE_ALL=y |
121 |
# CONFIG_GRKERNSEC_TPE_INVERT is not set |
122 |
CONFIG_GRKERNSEC_TPE_GID=10006 |
123 |
|
124 |
# |
125 |
# Network Protections |
126 |
# |
127 |
CONFIG_GRKERNSEC_RANDNET=y |
128 |
CONFIG_GRKERNSEC_SOCKET=y |
129 |
CONFIG_GRKERNSEC_SOCKET_ALL=y |
130 |
CONFIG_GRKERNSEC_SOCKET_ALL_GID=10004 |
131 |
CONFIG_GRKERNSEC_SOCKET_CLIENT=y |
132 |
CONFIG_GRKERNSEC_SOCKET_CLIENT_GID=10003 |
133 |
CONFIG_GRKERNSEC_SOCKET_SERVER=y |
134 |
CONFIG_GRKERNSEC_SOCKET_SERVER_GID=10002 |
135 |
|
136 |
# |
137 |
# Sysctl support |
138 |
# |
139 |
CONFIG_GRKERNSEC_SYSCTL=y |
140 |
# CONFIG_GRKERNSEC_SYSCTL_ON is not set |
141 |
|
142 |
# |
143 |
# Logging Options |
144 |
# |
145 |
CONFIG_GRKERNSEC_FLOODTIME=5 |
146 |
CONFIG_GRKERNSEC_FLOODBURST=5 |
147 |
|
148 |
# |
149 |
# PaX |
150 |
# |
151 |
CONFIG_PAX=y |
152 |
|
153 |
# |
154 |
# PaX Control |
155 |
# |
156 |
# CONFIG_PAX_SOFTMODE is not set |
157 |
CONFIG_PAX_EI_PAX=y |
158 |
CONFIG_PAX_PT_PAX_FLAGS=y |
159 |
CONFIG_PAX_NO_ACL_FLAGS=y |
160 |
# CONFIG_PAX_HAVE_ACL_FLAGS is not set |
161 |
# CONFIG_PAX_HOOK_ACL_FLAGS is not set |
162 |
|
163 |
# |
164 |
# Non-executable pages |
165 |
# |
166 |
CONFIG_PAX_NOEXEC=y |
167 |
CONFIG_PAX_PAGEEXEC=y |
168 |
CONFIG_PAX_SEGMEXEC=y |
169 |
CONFIG_PAX_EMUTRAMP=y |
170 |
CONFIG_PAX_MPROTECT=y |
171 |
# CONFIG_PAX_NOELFRELOCS is not set |
172 |
# CONFIG_PAX_KERNEXEC is not set |
173 |
|
174 |
# |
175 |
# Address Space Layout Randomization |
176 |
# |
177 |
CONFIG_PAX_ASLR=y |
178 |
CONFIG_PAX_RANDKSTACK=y |
179 |
CONFIG_PAX_RANDUSTACK=y |
180 |
CONFIG_PAX_RANDMMAP=y |
181 |
|
182 |
# |
183 |
# Miscellaneous hardening features |
184 |
# |
185 |
# CONFIG_PAX_MEMORY_SANITIZE is not set |
186 |
# CONFIG_PAX_MEMORY_UDEREF is not set |
187 |
# CONFIG_KEYS is not set |
188 |
CONFIG_SECURITY=y |
189 |
# CONFIG_SECURITY_NETWORK is not set |
190 |
CONFIG_SECURITY_CAPABILITIES=y |
191 |
# CONFIG_SECURITY_ROOTPLUG is not set |