[grsec] Problem in linux-2.4.31-grsec

Brad Spengler spender at grsecurity.net
Tue Aug 9 19:32:30 EDT 2005


> Have I overseen something obvious? If not I'd suggest a SI_FROMUSER 
> check or similar somewhere in gr_handle_signal(). Let me know what you 
> think.

Thank you very much for the detailed report.  I've fixed the problem in 
CVS, with a modification to kernel/signal.c, so gr_handle_signal won't 
be called if SI_FROMUSER() fails.  Since you have code that produces the 
problem, can you verify this fix?

-Brad
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20050809/13de4eb1/attachment.pgp


More information about the grsecurity mailing list