Re: [gentoo-hardened] 2.6.28-hardened-r7 hangs before starting /sbin/init

[Alex Efros]

Hi!

On Fri, Apr 03, 2009 at 02:04:31AM +0300, Alex Efros wrote:
> To resume, what we've now:
>
> Fact 1: previous kernel (2.6.27-hardened-r8) doesn't hangs
> Fact 2: kernel hang after "Freeing unused kernel memory:"
>     * so I suppose it failed to start process N1
> Fact 3: kernel compiled without MPROTECT doesn't hangs
>     * so I suppose it's something related to PaX ...
>     * or some very unique hardware issue
> Fact 4: kernel loaded with init=/bin/bash hangs in same way
>     * so it's unlikely issue with runit-init
> Fact 5: paxctl -m for init command (/sbin/runit-init or /bin/bash) fix issue
>     * so there workaround exists which doesn't lower overall server security
> Fact 6: /bin/bash works just fine without paxctl -m after boot
>     * so it has nothing with usual PaX work
> Fact 7: this issue happens on one of several similar (if no equal) servers
>     * buggy hardware or some conflict (there IRQ differences between servers)?

This just happens again: after upgrade from 2.6.32-hardened-r9 to 
2.6.32-hardened-r22 kernel hangs after "Freeing unused kernel memory:".
With init=/bin/bash it boots ok (bash flags: -------x-e--).
With init=/sbin/runit-init it hangs (with flags: -------x-e--).
paxctl -m /sbin/runit-init fixed this issue.

Strange thing is: I've 4 HP servers with same hardware and same software,
but this issue happens only on one of servers - three other boot new
kernel without issues while their /sbin/runit-init has flags -------x-e--.

-- 
			WBR, Alex.