[grsec] problems with grsec for 2.6.13.2

Jakub Cerveny br at x86.sk
Thu Sep 29 19:37:30 EDT 2005 

On Thu, Sep 29, 2005 at 07:08:56PM -0400, Brad Spengler wrote:
> On Fri, Sep 30, 2005 at 12:15:42AM +0200, Jakub Cerveny wrote:
> > hi 
> > 
> > i tested the grsec patch for 2.6.13.2 from ~spender and everything seemed
> > to work flawlessly until the moment when i couldn't log into the machine
> > anymore remotely. ssh timeouted, but some other daemons were responding
> > and machine was responding to icmp echo requests.
> > this happened two times a day (today) - physical reboot was needed
> > second time i've had luck and runned `top' ,load was about 80 and rising.
> > same thing happened to one of my friends with this version of grsec
> > 
> > so i suppose we have a problem here :)
> 
> What was the last version of grsecurity you installed on your system 
> that did not have this problem?  Is there anything in the system logs 
> that would give a clue as to the problem?  What was the load on the 
> system due to?
> 
> -Brad



> _______________________________________________
> grsecurity mailing list
> grsecurity at grsecurity.net
> http://grsecurity.net/cgi-bin/mailman/listinfo/grsecurity

latest version that runned fine was for 2.6.11.12 ,i've had uptime with it about 52 days 

in logs i find this ,looks like machine runned out of memory..
i think this caused that high load 

Sep 26 11:34:07 tombstone kernel: HighMem per-cpu: empty
Sep 26 11:34:07 tombstone kernel: Free pages:        4884kB (0kB HighMem)
Sep 26 11:34:07 tombstone kernel: Active:78524 inactive:41119 dirty:7194 writeback:4291 unstable:0 free:1221 slab:6723 
mapped:60738 pagetables:647
Sep 26 11:34:07 tombstone kernel: DMA free:2020kB min:88kB low:108kB high:132kB active:8828kB inactive:356kB present:16
384kB pages_scanned:33 all_unreclaimable? no
Sep 26 11:34:07 tombstone kernel: lowmem_reserve[]: 0 495 495
Sep 26 11:34:07 tombstone kernel: Normal free:2864kB min:2804kB low:3504kB high:4204kB active:305268kB inactive:164120k
B present:507840kB pages_scanned:0 all_unreclaimable? no
Sep 26 11:34:07 tombstone kernel: lowmem_reserve[]: 0 0 0
Sep 26 11:34:07 tombstone kernel: HighMem free:0kB min:128kB low:160kB high:192kB active:0kB inactive:0kB present:0kB p
ages_scanned:0 all_unreclaimable? no
Sep 26 11:34:07 tombstone kernel: lowmem_reserve[]: 0 0 0
Sep 26 11:34:07 tombstone kernel: DMA: 5*4kB 0*8kB 1*16kB 0*32kB 1*64kB 1*128kB 1*256kB 1*512kB 1*1024kB 0*2048kB 0*409
6kB = 2020kB
Sep 26 11:34:07 tombstone kernel: Normal: 584*4kB 0*8kB 1*16kB 0*32kB 0*64kB 0*128kB 0*256kB 1*512kB 0*1024kB 0*2048kB 
0*4096kB = 2864kB

Sep 26 11:34:07 tombstone kernel: HighMem: empty
Sep 26 11:34:07 tombstone kernel: Swap cache: add 1345, delete 1316, find 3825/3935, race 0+0
Sep 26 11:34:07 tombstone kernel: Free swap  = 215716kB
Sep 26 11:34:07 tombstone kernel: Total swap = 217720kB
Sep 26 11:34:07 tombstone kernel: swapper: page allocation failure. order:1, mode:0x20
Sep 26 11:34:07 tombstone kernel:  [<c0164f33>] __alloc_pages+0x2c3/0x480
Sep 26 11:34:07 tombstone kernel:  [<c0167fd1>] kmem_getpages+0x31/0xa0
Sep 26 11:34:07 tombstone kernel:  [<c0168c89>] cache_grow+0xb9/0x180
Sep 26 11:34:07 tombstone kernel:  [<c0168ec3>] cache_alloc_refill+0x173/0x220
Sep 26 11:34:07 tombstone kernel:  [<c0169215>] __kmalloc+0x65/0x70
Sep 26 11:34:07 tombstone kernel:  [<c02f48a7>] alloc_skb+0x47/0xf0
Sep 26 11:34:07 tombstone kernel:  [<c0320d31>] tcp_collapse+0xf1/0x360
Sep 26 11:34:07 tombstone kernel:  [<c0349a99>] ip_ct_refresh_acct+0x109/0x110
Sep 26 11:34:07 tombstone kernel:  [<c03210b3>] tcp_prune_queue+0x83/0x1b0
Sep 26 11:34:07 tombstone kernel:  [<c0320ae8>] tcp_data_queue+0x958/0xab0
Sep 26 11:34:07 tombstone kernel:  [<c03516e8>] ip_nat_fn+0x88/0x1e0
Sep 26 11:34:07 tombstone kernel:  [<c0321987>] tcp_rcv_established+0x257/0x890
Sep 26 11:34:07 tombstone kernel:  [<c032ad7a>] tcp_v4_do_rcv+0x11a/0x120
Sep 26 11:34:07 tombstone kernel:  [<c032b36c>] tcp_v4_rcv+0x5ec/0x7c0
Sep 26 11:34:07 tombstone kernel:  [<c0310350>] ip_local_deliver+0x100/0x280
Sep 26 11:34:07 tombstone kernel:  [<c03109d0>] ip_local_deliver_finish+0x0/0x1e0
Sep 26 11:34:07 tombstone kernel:  [<c0310844>] ip_rcv+0x374/0x500
Sep 26 11:34:07 tombstone kernel:  [<c0310bb0>] ip_rcv_finish+0x0/0x2a0
Sep 26 11:34:07 tombstone kernel:  [<c0139a63>] try_to_wake_up+0xb3/0xd0
Sep 26 11:34:07 tombstone kernel:  [<c02fa944>] netif_receive_skb+0x1e4/0x240
Sep 26 11:34:07 tombstone kernel:  [<c02faa1f>] process_backlog+0x7f/0x100
Sep 26 11:34:07 tombstone kernel:  [<c02fab14>] net_rx_action+0x74/0x100
Sep 26 11:34:07 tombstone kernel:  [<c0142e6b>] __do_softirq+0x7b/0x90
Sep 26 11:34:07 tombstone kernel:  [<c0142ea6>] do_softirq+0x26/0x30
Sep 26 11:34:07 tombstone kernel:  [<c0142f75>] irq_exit+0x35/0x40
Sep 26 11:34:07 tombstone kernel:  [<c012bcee>] do_IRQ+0x1e/0x30
Sep 26 11:34:07 tombstone kernel:  [<c012a06a>] common_interrupt+0x1a/0x20
Sep 26 11:34:07 tombstone kernel:  [<c0127c80>] default_idle+0x0/0x30
Sep 26 11:34:07 tombstone kernel:  [<c0127ca3>] default_idle+0x23/0x30
Sep 26 11:34:07 tombstone kernel:  [<c0127d40>] cpu_idle+0x50/0x60


Sep 29 00:56:53 tombstone kernel: HighMem: empty
Sep 29 01:01:36 tombstone kernel: Swap cache: add 67305, delete 67304, find 13723/14718, race 0+3
Sep 29 01:05:26 tombstone kernel: Free swap  = 0kB
Sep 29 01:05:26 tombstone kernel: Total swap = 217720kB
Sep 29 01:05:30 tombstone kernel: printk: 11615 messages suppressed.
Sep 29 01:05:30 tombstone kernel: oom-killer: gfp_mask=0x201d2, order=0
Sep 29 01:05:30 tombstone kernel: DMA per-cpu:
Sep 29 01:05:30 tombstone kernel: cpu 0 hot: low 2, high 6, batch 1 used:5
Sep 29 01:05:30 tombstone kernel: cpu 0 cold: low 0, high 2, batch 1 used:0
Sep 29 01:05:30 tombstone kernel: Normal per-cpu:
Sep 29 01:05:30 tombstone kernel: cpu 0 hot: low 62, high 186, batch 31 used:86
Sep 29 01:05:30 tombstone kernel: cpu 0 cold: low 0, high 62, batch 31 used:28
Sep 29 01:05:32 tombstone kernel: HighMem per-cpu: empty
Sep 29 01:05:32 tombstone kernel: Free pages:        5216kB (0kB HighMem)

this is from 2.6.13-grsec 

and this is from 2.6.13.2

ep 29 21:55:46 tombstone kernel: oom-killer: gfp_mask=0x201d2, order=0
Sep 29 21:55:46 tombstone kernel: DMA per-cpu:
Sep 29 21:55:46 tombstone kernel: cpu 0 hot: low 2, high 6, batch 1 used:5
Sep 29 21:55:46 tombstone kernel: cpu 0 cold: low 0, high 2, batch 1 used:0
Sep 29 21:55:46 tombstone kernel: Normal per-cpu:
Sep 29 21:55:46 tombstone kernel: cpu 0 hot: low 62, high 186, batch 31 used:91
Sep 29 21:55:46 tombstone kernel: cpu 0 cold: low 0, high 62, batch 31 used:38
Sep 29 21:55:46 tombstone kernel: HighMem per-cpu: empty
Sep 29 21:55:46 tombstone kernel: Free pages:        4456kB (0kB HighMem)
Sep 29 21:55:46 tombstone kernel: Active:11021 inactive:108399 dirty:0 writeback:25 unstable:0 free:1114 slab:4251 mapped:120377 pagetables:921
Sep 29 21:55:46 tombstone kernel: DMA free:2068kB min:88kB low:108kB high:132kB active:4520kB inactive:4628kB present:16384kB pages_scanned:11566 all_unreclaima
ble? yes
Sep 29 21:55:46 tombstone kernel: lowmem_reserve[]: 0 495 495
Sep 29 21:55:46 tombstone kernel: Normal free:2388kB min:2804kB low:3504kB high:4204kB active:39564kB inactive:428968kB present:507840kB pages_scanned:1303227 a
ll_unreclaimable? yes
Sep 29 21:55:46 tombstone kernel: lowmem_reserve[]: 0 0 0
Sep 29 21:55:46 tombstone kernel: HighMem free:0kB min:128kB low:160kB high:192kB active:0kB inactive:0kB present:0kB pages_scanned:0 all_unreclaimable? no
Sep 29 21:55:46 tombstone kernel: lowmem_reserve[]: 0 0 0
Sep 29 21:55:46 tombstone kernel: DMA: 1*4kB 6*8kB 0*16kB 1*32kB 1*64kB 1*128kB 1*256kB 1*512kB 1*1024kB 0*2048kB 0*4096kB = 2068kB
Sep 29 21:55:46 tombstone kernel: Normal: 1*4kB 0*8kB 1*16kB 36*32kB 3*64kB 0*128kB 0*256kB 0*512kB 1*1024kB 0*2048kB 0*4096kB = 2388kB
Sep 29 21:55:46 tombstone kernel: HighMem: empty
Sep 29 21:55:46 tombstone kernel: Swap cache: add 75480, delete 75426, find 16130/17859, race 2+4
Sep 29 21:55:46 tombstone kernel: Free swap  = 0kB
Sep 29 21:55:46 tombstone kernel: Total swap = 217720kB
Sep 29 21:55:46 tombstone kernel: oom-killer: gfp_mask=0x201d2, order=0
Sep 29 21:55:46 tombstone kernel: DMA per-cpu:
Sep 29 21:55:46 tombstone kernel: cpu 0 hot: low 2, high 6, batch 1 used:5
Sep 29 21:55:46 tombstone kernel: cpu 0 cold: low 0, high 2, batch 1 used:0
Sep 29 21:55:46 tombstone kernel: Normal per-cpu:
Sep 29 21:55:46 tombstone kernel: cpu 0 hot: low 62, high 186, batch 31 used:91
Sep 29 21:55:46 tombstone kernel: cpu 0 cold: low 0, high 62, batch 31 used:38
Sep 29 21:55:46 tombstone kernel: HighMem per-cpu: empty
Sep 29 21:55:46 tombstone kernel: Free pages:        4456kB (0kB HighMem)
Sep 29 21:55:46 tombstone kernel: Active:11085 inactive:108335 dirty:0 writeback:25 unstable:0 free:1114 slab:4251 mapped:120377 pagetables:921
Sep 29 21:55:46 tombstone kernel: DMA free:2068kB min:88kB low:108kB high:132kB active:4520kB inactive:4628kB present:16384kB pages_scanned:11566 all_unreclaima
ble? yes
Sep 29 21:55:46 tombstone kernel: lowmem_reserve[]: 0 495 495
Sep 29 21:55:46 tombstone kernel: Normal free:2388kB min:2804kB low:3504kB high:4204kB active:39820kB inactive:428712kB present:507840kB pages_scanned:1303689 a
ll_unreclaimable? yes
Sep 29 21:55:46 tombstone kernel: lowmem_reserve[]: 0 0 0

More information about the grsecurity mailing list