Strange behavior with grsec

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Strange behavior with grsec

Postby crusader » Mon Jan 10, 2005 12:51 pm

Hi,

i have noticed a strange behavior on my machines with kernel version greater than 2.4.24 with grsecurity and with these two options set on Intel Xeon:

CONFIG_PAX_NOEXEC=y
CONFIG_PAX_SEGMEXEC=y

i`m using apache + suexec on my servers and RLIMIT directives in httpd.conf to limit the resources of the web applications

when i upgrade to kernel version greater than 2.4.24 and enable grsecurity
many applications doesn`t work because the given resources are not enough for examle memory limit 35MB per process

with CONFIG_PAX_NOEXEC & CONFIG_PAX_SEGMEXEC there is no such problem with any 2.4.* kernel

on 2.4.24 with these options enabled and older there is no problem also

thanks in advance
crusader
 
Posts: 17
Joined: Tue Dec 21, 2004 7:25 am

Return to grsecurity support