linux-grsec-4.7.7 locks up within 30 minutes

[foxxx0]

(without changing the config, saw the reply from spender too late)

dmesg right after boot: https://paste.foxxx0.de/47TWf/

after triggering the panic: https://paste.foxxx0.de/oke/

I will try with GRKERNSEC_KERN_LOCKOUT disabled tomorrow again.

[spender]

When you reboot without GRKERNSEC_KERN_LOCKOUT, can you also change the %pS to %pA ?

-Brad

[PaX Team]

what's addr2line -e build_dir/vmlinux -fip ffffffff81419a98 say?

[timbgo]

Alright, so:

4.6.4.r201607112205 is working just fine

4.7.0.r201608131240 is broken

So the issue (at least for me) was introduced in 4.7.0.
Unfortunately I have no later 4.6.x kernels that I could test, so >4.6.4.r201607112205 and <= 4.7.0.r201608131240 is the range where the issue was introduced.

May be, but I'm having a likely bug in the kernel issue as well. I'm not an expert, but the symptoms are similar to your case:
banning user... until system restart for ... kernel crash w/ Qemu
viewtopic.php?f=3&t=4593#p16685

And I reported the Call Trace's quite a few.

I said "may be" above, because in my case, with Qemu in Gentoo, the last kernel that works is:

Code: Select all

sys-kernel/hardened-sources-4.7.5

(in Gentoo portage terms)
And both:

Code: Select all

sys-kernel/hardened-sources-4.7.6

and

Code: Select all

sys-kernel/hardened-sources-4.7.7

crash.
Regards!
---
Miroslav Rovis
Zagreb, Croatia
http://www.CroatiaFidelis.hr
Try refute: rootkit hooks in kernel,
linux capabilities for intrusion? (Linus?)

[foxxx0]

When you reboot without GRKERNSEC_KERN_LOCKOUT, can you also change the %pS to %pA ?

-Brad

Building now, stay tuned.

what's addr2line -e build_dir/vmlinux -fip ffffffff81419a98 say?

Not much, just:

Code: Select all

$ addr2line -e src/linux-4.7/vmlinux -fip ffffffff81419a98
show_type at bgrt.c:?


[foxxx0]

Alright, gathering information with GRKERNSEC_KERN_LOCKOUT disabled is much less annoying.

Here is the dmesg after running the grep that successfully triggered the issue in all previous tests:
https://paste.foxxx0.de/l6P9pW/

[PaX Team]

thanks, that was enough to identify the problem, all the sysfs callbacks in drivers/acpi/bgrt.c have the wrong type, i'll fix them in the next patch. for next time, you could enable the DEBUG_INFO options .

@Miroslav: your problem is something unrelated, please keep that discussion in the other thread (or at https://bugs.gentoo.org/show_bug.cgi?id=597554 which is where it was already reported).

[foxxx0]

thanks, that was enough to identify the problem, all the sysfs callbacks in drivers/acpi/bgrt.c have the wrong type, i'll fix them in the next patch. for next time, you could enable the DEBUG_INFO options .

@Miroslav: your problem is something unrelated, please keep that discussion in the other thread (or at https://bugs.gentoo.org/show_bug.cgi?id=597554 which is where it was already reported).

Just tested 4.7.10.r201610222037 and the issue seems to be fixed.

Thanks! Always a pleasure working with you guys