[grsec] random x freeze

[Peter S. Mazinger]

On Sat, 12 Mar 2005, fellow wrote:

> hi!
> i'm using an up-to-date debian sid, on an i386 system with 2.6.11 
> vanilla kernel and grsecurity-2.1.3-2.6.11-200503091157.patch 
> (high security level).
> the xfree86 (4.3.0.dfsg.1-12.0.1) is randomly freezing, after every 

you should consider switching to xorg-x11-6.8.x and use their dlloader in 
conjunction w/ grsec.

> 3th or 7th boot. only the x is affected, everything else (net, audio, 
> ...) seems the work (with the x hangup, the input devices are 
> useless). the visual simptom: screen is freezing, only the cursor 
> works (looks silly, only rnd b&w dots) or the x is halting and the 
> xdm come up (and freezing).
> i have done a lot of testing, and it seems the non-executable part of
>  the pax is causing the freeze, both segmexec and pageexec (other 
> parts of the pax looks no affected: restrict mprotect, kernexec, 
> randomize kernel stack).
> possibly there is a bug in the video driver (x's built-in nv; fx5600 
> card), i'll run tests in vesa mode too.
> any other grsec options (like deny writing in /dev/(k)mem) seems to 
> be fine.

that is (almost) impossible if you havent used some patches, if you enable 
IO and KMEM protection, you can't run X, some X drivers need IO disabled, 
some others both IO and KMEM not set

Peter

> there is no problem with the 2.6.10-grsec patch or vanilla 2.6.11 
> kernel.
> 
> fellow
> 
> ---
> http://fellow.linuxforum.hu/ - faq, debian desktop kialakitasa, linux kernel konfiguralasa, -pear kernelpatch, egyebek
> _______________________________________________
> grsecurity mailing list
> grsecurity at grsecurity.net
> http://grsecurity.net/cgi-bin/mailman/listinfo/grsecurity
> 
> 

-- 
Peter S. Mazinger <ps dot m at gmx dot net>           ID: 0xA5F059F2
Key fingerprint = 92A4 31E1 56BC 3D5A 2D08  BB6E C389 975E A5F0 59F2