[grsec] small oops with 2.6.7

Laszlo 'GCS' Boszormenyi gcs at lsc.hu
Mon Jul 26 14:14:06 EDT 2004


Hi,

 I have Debian Sarge/testing on an old box (PII overclocked to 266Mhz)
and it was running on a roll-your-own 2.6.7; but I have patched
grsecurity into it, and recompiled it with the same config+grsecurity
set up as I like it. During boot, after each daemon start I get the
following oops:
Jul 26 07:39:27 localhost kernel: in_atomic():1, irqs_disabled():0
Jul 26 07:39:27 localhost kernel:  [dump_stack+23/32]
Jul 26 07:39:27 localhost kernel:  [__might_sleep+165/208]
Jul 26 07:39:27 localhost kernel:  [xfs_ilock+71/224]
Jul 26 07:39:27 localhost kernel:  [xfs_inactive_free_eofblocks+140/480]
Jul 26 07:39:27 localhost kernel:  [xfs_release+119/192]
Jul 26 07:39:27 localhost kernel:  [linvfs_release+26/48]
Jul 26 07:39:27 localhost kernel:  [__fput+279/304]
Jul 26 07:39:27 localhost kernel:  [gr_acl_handle_exit+101/2768]
Jul 26 07:39:27 localhost kernel:  [do_exit+149/1120]
Jul 26 07:39:27 localhost kernel:  [do_group_exit+49/176]
Jul 26 07:39:27 localhost kernel:  [syscall_call+7/11]

Additionaly on the screen I see:
Debug: sleeping function called from invalid context at include/linux/rwsem.h:43
The block around is this snippshet:
38:/*
39: * lock for reading
40: */
41:static inline void down_read(struct rw_semaphore *sem)
42:{
43:	might_sleep();
44:	rwsemtrace(sem,"Entering down_read");
45:	__down_read(sem);
46:	rwsemtrace(sem,"Leaving down_read");
47:}

I have only one partition, which is XFS.
gcc version is:
Reading specs from /usr/lib/gcc-lib/i486-linux/3.3.4/specs
Configured with: ../src/configure -v --enable-languages=c,c++,java,f77,pascal,objc,ada,treelang --prefix=/usr --mandir=/usr/share/man --infodir=/usr/share/info --with-gxx-include-dir=/usr/include/c++/3.3 --enable-shared --with-system-zlib --enable-nls --without-included-gettext --enable-__cxa_atexit --enable-clocale=gnu --enable-debug --enable-java-gc=boehm --enable-java-awt=xlib --enable-objc-gc
i486-linux
Thread model: posix
gcc version 3.3.4 (Debian 1:3.3.4-4)

Please tell me if you need more information.

* spender at grsecurity.net <spender at grsecurity.net> [2004-07-22 21:43:24 -0400]:

> I should also mention that
> the new releases of grsecurity are waiting for the release of Linux
> 2.4.27.  If you're following the 2.6 tree of kernels, there is a patch
> available for 2.6.7 at
> http://grsecurity.net/~spender/grsecurity-2.0.1-2.6.7.patch
 Does it mean that you are not currently working on a patch for 2.6.8?
It seems 2.6.8 is close to be released.

Regards,
Laszlo/GCS



More information about the grsecurity mailing list