[grsec] grsecurity + skas UML patch for 2.6.14.5

Max CtRiX ctrix+grsec at navynet.it
Wed Jan 11 08:32:54 EST 2006


Lubomir Host wrote:
 > It is bootable with grsec turned on, but I'm not using this kernel on
 > production servers yet.

I'm trying it now.
It seems to have problems compiling in function do_brk when 
CONFIG_PAX_SEGMEXEC is defined.

tried to patch this with (cut&paste):

-ret_m =        __do_mmap_pgoff(    NULL, addr + SEGMEXEC_TASK_SIZE, 
0UL, PROT_NONE, MAP_PRIVATE | MAP_FIXED | MAP_MIRROR, addr);

+ret_m = __do_mmap_pgoff(current->mm,NULL, addr + SEGMEXEC_TASK_SIZE, 
0UL, PROT_NONE, MAP_PRIVATE | MAP_FIXED | MAP_MIRROR, addr);

I really don't know what it will cause.
Let you know.

Max


More information about the grsecurity mailing list