On 12/26/2010 03:46 AM, pagee...@freemail.hu wrote: > On 26 Dec 2010 at 1:59, Michael Orlitzky wrote: > >> I've got (at least) two servers that lose their root partition after >> this upgrade. One of them has an HP cciss SCSI RAID controller; the >> other has a single IDE hard drive. Assuming the problem is something >> common, I'll stick to describing the one with the array for now. > > which grsec is this ebuild based on? my guess is that it's a recent PaX/UDEREF > hardening that's causing this and should be mostly fixed now except for the > IP checksum code fix which i'll release soon. in the meantime you can disable > UDEREF. if you don't have it enabled then i don't know what it is, we'll need > more debugging, let me know.
The hardened-patches contains the following: 4423_grsec-remove-protected-paths.patch 4420_grsecurity-2.2.1-2.6.36.2-201012121726.patch 4435_grsec-kconfig-gentoo.patch 4421_grsec-remove-localversion-grsec.patch 4425_grsec-pax-without-grsec.patch 4430_grsec-kconfig-default-gids.patch 4422_grsec-mute-warnings.patch I do have UDEREF enabled: # grep UDEREF .config CONFIG_PAX_MEMORY_UDEREF=y I can try disabling it when I'd be willing to drive to work and reboot the thing.
