[grsec] Problem with CONFIG_GRKERNSEC_CHROOT_FINDTASK

Milan Holzäpfel lists at mjh.name
Sun Jun 5 13:02:20 EDT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

I'm on amd64.  If I have CONFIG_GRKERNSEC_CHROOT_FINDTASK enabled and
run 32-Bit-Apps which eat 100% CPU within a chroot, the mouse gets very
unreliable in Xorg.  Only very few of the instructions from the mouse
seem to be processed, e. g. I can click 10 times on a button in a row,
and one time the button gets click.  The same applies to the movement
of the mouse.  The mouse continues to work fine with GPM on the
console. 

The problem occured in my usual configuration (most of GRSecurity,
most of PaX; mprotect was disabled for the chroot-dir via the ACL
system, as the 32-Bit-binaries don't work otherwise) and also in a
configuration where the only selection within GRSecurity and PaX was
CONFIG_GRKERNSEC_CHROOT_FINDTASK (and CONFIG_GRKERNSEC_CHROOT, of
course.)  It doesn't occur if I disable
CONFIG_GRKERNSEC_CHROOT_FINDTASK in my usual configuration. 

amd64, kernel 2.6.11.11 patched with
grsecurity-2.1.5-2.6.11.9-200505121617.patch.gz and reiser4.  I guess
that this a bug in GRSecurity? 

Regards,
Milan

- -- 
1024D/65837966 2004-01-24 Milan Holzaepfel (jagdfalke/jag) <mail(A)mjh(D)name>
4C8A 5FAF 5D32 6125 89D1  0CE5 DB0C AF4F 6583 7966      <URL:http://mjh.name/>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFCozAc2wyvT2WDeWYRAjKfAKCsFDGyj59F/CDFGP43Jf+N5vxZzACdHm8U
rvzmU01yjrM15zgR+qzJk2w=
=+SWG
-----END PGP SIGNATURE-----


More information about the grsecurity mailing list