On 15/05/10 02:15, pagee...@freemail.hu wrote: > On 13 May 2010 at 0:55, Alex Efros wrote: > >> Server was rebooted, now everything is fine. Server software is nearly >> up-to-date x86 Gentoo (last update was 2-3 weeks ago), kernel is >> sys-kernel/hardened-sources-2.6.28-r9. > > i'd need the vmlinux image to tell for sure but it's most likely a false > positive > that has been fixed since in later kernels, so please try to use something we > actually > support (.32 or .33, soon .34), not .28.
I'm sorry for probably being quite upset now. But in regards to the supported version, that sounds like utter non-sense to me. I just updated the portage tree ... and this is what is available there: $ find /usr/portage/sys-kernel/hardened-sources /usr/portage/sys-kernel/hardened-sources /usr/portage/sys-kernel/hardened-sources/metadata.xml /usr/portage/sys-kernel/hardened-sources/Manifest /usr/portage/sys-kernel/hardened-sources/ChangeLog /usr/portage/sys-kernel/hardened-sources/hardened-sources-2.6.25-r13.ebuild /usr/portage/sys-kernel/hardened-sources/hardened-sources-2.6.26-r9.ebuild /usr/portage/sys-kernel/hardened-sources/hardened-sources-2.6.28-r9.ebuild /usr/portage/sys-kernel/hardened-sources/hardened-sources-2.6.29.ebuild /usr/portage/sys-kernel/hardened-sources/hardened-sources-2.6.28-r7.ebuild I simply do not see that .32, .33 nor any .34 kernels have been made available nor marked as stable. And I am not using a fixed mirror in /etc/make.conf. This is once again a repetition of the a similar discussion a few weeks ago, where several of us raised the concern about an outdated hardened stable kernel. I might have missed some obvious information, but I cannot see anywhere among the hardened project documentation pages that we should expect to find the hardened kernels anywhere else. <http://www.gentoo.org/doc/en/?catid=project> <http://www.gentoo.org/proj/en/hardened/> We *seriously* need to get this clarified now. There might even be a lot of users who don't visit the hardened IRC channel or the mailing list - and they are most probably running a .28-r9 kernel, which is the latest stable kernel - at least how I can understand it ... this situation is making me uncomfortable and quite worried now! kind regards, David Sommerseth