Re: [gentoo-hardened] pax, core2duo, suspicious activity

[brant williams]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


Hi paxguy =)

I experienced the same issue after upgrading to 
hardened-sources-2.6.23-r4 this past weekend.  Previously, I'd been using 
hardened-sources-2.6.22-r8 for ~30 days with no discernable problems. 
After checking both config files, though, it looks like I may have rushed 
through too quickly (sdiff attached).

I've got a screenshot of the log entry that occurred right before the 
crash (png attached), and can provide the System.map and kernel image to 
you off-list if that would help.

Thank you for your efforts.


brant williams
FCAA CDCA 20BC 3925 D634  F5C4 7420 6784 4DEB 6002



On Wed, 6 Feb 2008, pageexec@××××××××.hu wrote:

> Date: Wed, 06 Feb 2008 13:49:12 +0200
> From: pageexec@××××××××.hu
> Reply-To: gentoo-hardened@l.g.o
> To: gentoo-hardened@l.g.o
> Subject: Re: [gentoo-hardened] pax, core2duo, suspicious activity
>
> On 6 Feb 2008 at 10:24,   wrote:
>
>> SSH session droped, all daemons stopping too. On the monitor a get
>> "Suspicious activity.... bla-bla PaX... bla-bla...
>
> can you post the precise message? even a screenshot would be fine
> (try to boot with a high resolution frame buffer mode to get as much
> info as you can). also i'll need the System.map file and probably
> vmlinux as well.
>
>> When I recompile kernel without PaX, system works normal withouts
>> kernel-panics.
>
> did you determine which PaX feature triggers the problem?
>
> also, would be nice if you could try out the 2.6.24 test patch.
>
> PS: if you enable HIGHMEM64G/PAGEEXEC then PaX will make use of
> the NX bit.
>
> --
> gentoo-hardened@l.g.o mailing list
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.7 (GNU/Linux)

iD8DBQFHqbzkdCBnhE3rYAIRCBqGAKCdKtGnYzyj2SD3AefLY4w+zeQD1wCfZDra
WPNDEB3qSwPK2N4Vfy3spwg=
=kVu0
-----END PGP SIGNATURE-----