Re: [gentoo-hardened] pax, core2duo, suspicious activity

2008-02-06 Thread Алексей Лесовский
system crashes unexpectedly, and can go down at any time. strace can't do, i don't know what is this. and webrsync fail too Steve Buzonas пишет: On Feb 6, 2008 8:57 AM, brant williams <[EMAIL PROTECTED] > wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA2

Re: [gentoo-hardened] pax, core2duo, suspicious activity

2008-02-06 Thread Алексей Лесовский
Hello Brant, yes, I see in console analog message, with your screenshot of emerge.log and with this words "PaX: suspicious general protection fault" thanks for configdiffs brant williams пишет: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi paxguy =) I experienced the same issue after

Re: [gentoo-hardened] pax, core2duo, suspicious activity

2008-02-06 Thread Алексей Лесовский
[EMAIL PROTECTED] пишет: On 6 Feb 2008 at 10:24, wrote: can you post the precise message? even a screenshot would be fine (try to boot with a high resolution frame buffer mode to get as much info as you can). also i'll need the System.map file and probably vmlinux as well. now system works w

Re: [gentoo-hardened] pax, core2duo, suspicious activity

2008-02-06 Thread Steve Buzonas
On Feb 6, 2008 8:57 AM, brant williams <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > > Hi paxguy =) > > I experienced the same issue after upgrading to > hardened-sources-2.6.23-r4 this past weekend. Previously, I'd been using > hardened-sources-2.6.22-r8 for

Re: [gentoo-hardened] pax, core2duo, suspicious activity

2008-02-06 Thread pageexec
On 6 Feb 2008 at 7:57, brant williams wrote: > I've got a screenshot of the log entry that occurred right before the > crash (png attached), and can provide the System.map and kernel image to > you off-list if that would help. yes, i'll need them because your oops doesn't have symbol info. it wo

Re: [gentoo-hardened] pax, core2duo, suspicious activity

2008-02-06 Thread brant williams
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Along with a similar post[1] from December, these all seem to be rsync related... [1] http://www.nabble.com/PAX%3A-suspicious-general-protection-fault-tt14133006.html brant williams FCAA CDCA 20BC 3925 D634 F5C4 7420 6784 4DEB 6002 On Wed

Re: [gentoo-hardened] pax, core2duo, suspicious activity

2008-02-06 Thread brant williams
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi paxguy =) I experienced the same issue after upgrading to hardened-sources-2.6.23-r4 this past weekend. Previously, I'd been using hardened-sources-2.6.22-r8 for ~30 days with no discernable problems. After checking both config files, thoug

Re: [gentoo-hardened] pax, core2duo, suspicious activity

2008-02-06 Thread pageexec
On 6 Feb 2008 at 10:24, wrote: > SSH session droped, all daemons stopping too. On the monitor a get > "Suspicious activity bla-bla PaX... bla-bla... can you post the precise message? even a screenshot would be fine (try to boot with a high resolution frame buffer mode to get as much info as

Re: [gentoo-hardened] pax, core2duo, suspicious activity

2008-02-06 Thread Алексей Лесовский
Гуров В.В. пишет: On Wed, 06 Feb 2008 10:24:20 +0500 Алексей Лесовский <[EMAIL PROTECTED]> wrote: Linux ---.ru 2.6.22-hardened-r7 #1 SMP Thu Oct 18 12:19:52 SAMST 2007 x86_64 Intel(R) Core(TM)2 CPU 6300 @ 1.86GHz GenuineIntel GNU/Linux - no problem I have... Linux 2.6.23-hardened-r

Re: [gentoo-hardened] pax, core2duo, suspicious activity

2008-02-06 Thread Алексей Лесовский
kernel config # # Automatically generated make config: don't edit # Linux kernel version: 2.6.23-hardened-r4 # Wed Feb 6 17:10:45 2008 # CONFIG_X86_32=y CONFIG_GENERIC_TIME=y CONFIG_GENERIC_CMOS_UPDATE=y CONFIG_CLOCKSOURCE_WATCHDOG=y CONFIG_GENERIC_CLOCKEVENTS=y CONFIG_GENERIC_CLOCKEVENTS_BROADCA

Re: [gentoo-hardened] pax, core2duo, suspicious activity

2008-02-06 Thread Гуров В.В.
On Wed, 06 Feb 2008 10:24:20 +0500 Алексей Лесовский <[EMAIL PROTECTED]> wrote: > Hello all. and Sorry my English > Install hardened gentoo, and make kernel with PaX and Grsecurity. System > works normally, and can stop unexpectedly. > SSH session droped, all daemons stopping too. On the monitor