[grsec] current grsec (2.1.9-2.6.17.11-200609031316) patch against Linux-2.6.17.13

Christian Heim phreak at gentoo.org
Sun Sep 10 10:22:59 EDT 2006


Hey all,

I just tried to update Gentoo's hardened-sources to 2.6.17.13 and noticed 
that .12 seems to break the current patch.

This seems to be related to the following commit: 

author		Ernie Petrides <petrides at redhat.com>
		Sat, 26 Aug 2006 14:20:45 +0000 (10:20 -0400)

committer	Greg Kroah-Hartman <gregkh at suse.de>
		Fri, 8 Sep 2006 21:51:39 +0000 (14:51 -0700)

commit		4be6107d35a5b5f8eac9b92eef1e243a033a3f39
tree		462cab7504a4bf57fbf3e6a05adc1b4cb4a1bf18
parent		2cd6b01ad38d34b805a0a052725ec3f37e387ecd

entitled "binfmt_elf: fix checks for bad address".

Find attached (or on my webspace [1]) a patch against the latest grsecurity 
patch, that "fixes" this problem. Haven't booted my machine with said patch, 
so its pretty much untested and I'm not absolutely sure about hunk #14.

TIA, Christian

1:http://dev.gentoo.org/~phreak/files/patches/4451_grsec-2.1.9-2.6.17-200609031316-binfmt_elf.c.patch
-- 
Christian Heim <phreak at gentoo.org>
GPG key ID: 9A9F68E6
Fingerprint: AEC4 87B8 32B8 4922 B3A9 DF79 CAE3 556F 9A9F 68E6

Your friendly treecleaner/mobile/kernel/vserver/openvz monkey
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 4450_grsec-2.1.9-2.6.17-200609031316-binfmt_elf.c.patch
Type: text/x-diff
Size: 17686 bytes
Desc: not available
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20060910/7ba2c5b2/attachment.bin 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20060910/7ba2c5b2/attachment.pgp 


More information about the grsecurity mailing list