Hello!
After several years of "regular" Gentoo I decided to move to Hardened Gentoo using grsecurity & PaX. I tried initially the XT marking, but I switched back to PT marking because of bug #465000. Everything seems fine and seems to work, but I noticed some weird logs in the kernel log when I did yesterday an "emerge -e @world". I observed that for several packages in the configure step grsec is reporting resource overstep denials. But what really concerns me the 2 segfaults: readline and gcc. Please see attached kern.log file. What confuses me is that both packages build fine beside these errors. Is this "normal" for grsec hardened kernels? Should I just ignore those grsec messages and segfaults? I would really appreciate some hints about these. I attached also my kernel options related to security. Regards, Balint Szente
Apr 22 21:28:22 inspiro kernel: grsec: denied resource overstep by requesting 1052672 for RLIMIT_STACK against limit 1048576 for /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/conftest[conftest:29256] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/configure[configure:29255] uid/euid:0/0 gid/egid:0/0 Apr 22 21:28:22 inspiro kernel: grsec: denied resource overstep by requesting 1052672 for RLIMIT_STACK against limit 1048576 for /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/conftest[conftest:29278] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/configure[configure:29277] uid/euid:0/0 gid/egid:0/0 Apr 22 21:28:33 inspiro kernel: grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/conftest[conftest:30476] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/configure[configure:30475] uid/euid:0/0 gid/egid:0/0 Apr 22 21:28:34 inspiro kernel: grsec: denied resource overstep by requesting 13467648 for RLIMIT_AS against limit 5000000 for /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/conftest[conftest:30554] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/configure[configure:30553] uid/euid:0/0 gid/egid:0/0 Apr 22 21:28:34 inspiro kernel: grsec: denied resource overstep by requesting 5132936 for RLIMIT_DATA against limit 5000000 for /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/conftest[conftest:30554] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/configure[configure:30553] uid/euid:0/0 gid/egid:0/0 Apr 22 21:28:34 inspiro kernel: grsec: denied resource overstep by requesting 13598720 for RLIMIT_AS against limit 5000000 for /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/conftest[conftest:30554] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/configure[configure:30553] uid/euid:0/0 gid/egid:0/0 Apr 22 21:28:34 inspiro kernel: grsec: denied resource overstep by requesting 142684160 for RLIMIT_AS against limit 5000000 for /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/conftest[conftest:30554] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/configure[configure:30553] uid/euid:0/0 gid/egid:0/0 Apr 22 21:28:34 inspiro kernel: grsec: denied resource overstep by requesting 75575296 for RLIMIT_AS against limit 5000000 for /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/conftest[conftest:30554] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/configure[configure:30553] uid/euid:0/0 gid/egid:0/0 Apr 22 21:28:34 inspiro kernel: grsec: denied resource overstep by requesting 142684160 for RLIMIT_AS against limit 5000000 for /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/conftest[conftest:30554] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-devel/m4-1.4.16/work/m4-1.4.16/configure[configure:30553] uid/euid:0/0 gid/egid:0/0 Apr 22 21:28:34 inspiro kernel: grsec: more alerts, logging disabled for 10 seconds Apr 22 21:36:57 inspiro kernel: grsec: denied resource overstep by requesting 1000000 for RLIMIT_NOFILE against limit 1024 for /var/tmp/portage/sys-devel/gettext-0.18.2/work/gettext-0.18.2/gettext-tools/conftest[conftest:16664] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[sh:16663] uid/euid:0/0 gid/egid:0/0 Apr 22 21:36:57 inspiro kernel: grsec: denied resource overstep by requesting 4294967295 for RLIMIT_NOFILE against limit 1024 for /var/tmp/portage/sys-devel/gettext-0.18.2/work/gettext-0.18.2/gettext-tools/conftest[conftest:16675] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[sh:16674] uid/euid:0/0 gid/egid:0/0 Apr 22 21:40:25 inspiro kernel: grsec: denied resource overstep by requesting 1052672 for RLIMIT_STACK against limit 1048576 for /var/tmp/portage/sys-apps/diffutils-3.2/work/diffutils-3.2/conftest[conftest:2693] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-apps/diffutils-3.2/work/diffutils-3.2/configure[configure:2692] uid/euid:0/0 gid/egid:0/0 Apr 22 21:40:25 inspiro kernel: grsec: denied resource overstep by requesting 1052672 for RLIMIT_STACK against limit 1048576 for /var/tmp/portage/sys-apps/diffutils-3.2/work/diffutils-3.2/conftest[conftest:2715] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-apps/diffutils-3.2/work/diffutils-3.2/configure[configure:2714] uid/euid:0/0 gid/egid:0/0 Apr 22 21:40:38 inspiro kernel: grsec: denied resource overstep by requesting 1000000 for RLIMIT_NOFILE against limit 1024 for /var/tmp/portage/sys-apps/diffutils-3.2/work/diffutils-3.2/conftest[conftest:4498] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-apps/diffutils-3.2/work/diffutils-3.2/configure[configure:4497] uid/euid:0/0 gid/egid:0/0 Apr 22 21:40:38 inspiro kernel: grsec: denied resource overstep by requesting 4294967295 for RLIMIT_NOFILE against limit 1024 for /var/tmp/portage/sys-apps/diffutils-3.2/work/diffutils-3.2/conftest[conftest:4519] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-apps/diffutils-3.2/work/diffutils-3.2/configure[configure:4518] uid/euid:0/0 gid/egid:0/0 Apr 22 21:44:51 inspiro kernel: grsec: denied resource overstep by requesting 1000000 for RLIMIT_NOFILE against limit 1024 for /var/tmp/portage/app-arch/tar-1.26/work/tar-1.26/conftest[conftest:11999] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/app-arch/tar-1.26/work/tar-1.26/configure[configure:11998] uid/euid:0/0 gid/egid:0/0 Apr 22 21:44:51 inspiro kernel: grsec: denied resource overstep by requesting 4294967295 for RLIMIT_NOFILE against limit 1024 for /var/tmp/portage/app-arch/tar-1.26/work/tar-1.26/conftest[conftest:12038] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/app-arch/tar-1.26/work/tar-1.26/configure[configure:12037] uid/euid:0/0 gid/egid:0/0 Apr 22 21:46:18 inspiro kernel: grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/conftest[conftest:22889] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/configure[configure:22888] uid/euid:0/0 gid/egid:0/0 Apr 22 21:46:19 inspiro kernel: grsec: denied resource overstep by requesting 13467648 for RLIMIT_AS against limit 5000000 for /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/conftest[conftest:22978] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/configure[configure:22977] uid/euid:0/0 gid/egid:0/0 Apr 22 21:46:19 inspiro kernel: grsec: denied resource overstep by requesting 5132936 for RLIMIT_DATA against limit 5000000 for /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/conftest[conftest:22978] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/configure[configure:22977] uid/euid:0/0 gid/egid:0/0 Apr 22 21:46:19 inspiro kernel: grsec: denied resource overstep by requesting 13598720 for RLIMIT_AS against limit 5000000 for /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/conftest[conftest:22978] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/configure[configure:22977] uid/euid:0/0 gid/egid:0/0 Apr 22 21:46:19 inspiro kernel: grsec: denied resource overstep by requesting 142684160 for RLIMIT_AS against limit 5000000 for /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/conftest[conftest:22978] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/configure[configure:22977] uid/euid:0/0 gid/egid:0/0 Apr 22 21:46:19 inspiro kernel: grsec: denied resource overstep by requesting 75575296 for RLIMIT_AS against limit 5000000 for /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/conftest[conftest:22978] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/configure[configure:22977] uid/euid:0/0 gid/egid:0/0 Apr 22 21:46:19 inspiro kernel: grsec: denied resource overstep by requesting 142684160 for RLIMIT_AS against limit 5000000 for /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/conftest[conftest:22978] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/configure[configure:22977] uid/euid:0/0 gid/egid:0/0 Apr 22 21:46:19 inspiro kernel: grsec: more alerts, logging disabled for 10 seconds Apr 22 21:46:30 inspiro kernel: grsec: denied resource overstep by requesting 1000000 for RLIMIT_NOFILE against limit 1024 for /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/conftest[conftest:24637] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/configure[configure:24636] uid/euid:0/0 gid/egid:0/0 Apr 22 21:46:31 inspiro kernel: grsec: denied resource overstep by requesting 4294967295 for RLIMIT_NOFILE against limit 1024 for /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/conftest[conftest:24658] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/app-arch/gzip-1.5/work/gzip-1.5/configure[configure:24657] uid/euid:0/0 gid/egid:0/0 Apr 22 21:47:57 inspiro kernel: grsec: denied resource overstep by requesting 1000000 for RLIMIT_NOFILE against limit 1024 for /var/tmp/portage/sys-devel/bison-2.4.3/work/bison-2.4.3/conftest[conftest:6295] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-devel/bison-2.4.3/work/bison-2.4.3/configure[configure:6294] uid/euid:0/0 gid/egid:0/0 Apr 22 21:47:58 inspiro kernel: grsec: denied resource overstep by requesting 4294967295 for RLIMIT_NOFILE against limit 1024 for /var/tmp/portage/sys-devel/bison-2.4.3/work/bison-2.4.3/conftest[conftest:6316] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-devel/bison-2.4.3/work/bison-2.4.3/configure[configure:6315] uid/euid:0/0 gid/egid:0/0 Apr 22 21:55:39 inspiro kernel: conftest[32553]: segfault at 97511a20 ip 00000314ae7b62e6 sp 0000039ffeb0ad08 error 4 in libc-2.15.so[314ae694000+19f000] Apr 22 21:55:39 inspiro kernel: grsec: Segmentation fault occurred at 0000000097511a20 in /var/tmp/portage/sys-libs/readline-6.2_p1/work/readline-6.2/examples/rlfe/conftest[conftest:32553] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-libs/readline-6.2_p1/work/readline-6.2/examples/rlfe/configure[configure:32552] uid/euid:0/0 gid/egid:0/0 Apr 22 21:55:39 inspiro kernel: grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /var/tmp/portage/sys-libs/readline-6.2_p1/work/readline-6.2/examples/rlfe/conftest[conftest:32553] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-libs/readline-6.2_p1/work/readline-6.2/examples/rlfe/configure[configure:32552] uid/euid:0/0 gid/egid:0/0 Apr 22 22:04:44 inspiro kernel: grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /var/tmp/portage/sys-apps/coreutils-8.20/work/coreutils-8.20/conftest[conftest:9298] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-apps/coreutils-8.20/work/coreutils-8.20/configure[configure:9297] uid/euid:0/0 gid/egid:0/0 Apr 22 22:04:45 inspiro kernel: grsec: denied resource overstep by requesting 13467648 for RLIMIT_AS against limit 5000000 for /var/tmp/portage/sys-apps/coreutils-8.20/work/coreutils-8.20/conftest[conftest:9365] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-apps/coreutils-8.20/work/coreutils-8.20/configure[configure:9364] uid/euid:0/0 gid/egid:0/0 Apr 22 22:04:45 inspiro kernel: grsec: denied resource overstep by requesting 5132936 for RLIMIT_DATA against limit 5000000 for /var/tmp/portage/sys-apps/coreutils-8.20/work/coreutils-8.20/conftest[conftest:9365] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-apps/coreutils-8.20/work/coreutils-8.20/configure[configure:9364] uid/euid:0/0 gid/egid:0/0 Apr 22 22:04:45 inspiro kernel: grsec: denied resource overstep by requesting 13598720 for RLIMIT_AS against limit 5000000 for /var/tmp/portage/sys-apps/coreutils-8.20/work/coreutils-8.20/conftest[conftest:9365] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-apps/coreutils-8.20/work/coreutils-8.20/configure[configure:9364] uid/euid:0/0 gid/egid:0/0 Apr 22 22:04:45 inspiro kernel: grsec: denied resource overstep by requesting 142684160 for RLIMIT_AS against limit 5000000 for /var/tmp/portage/sys-apps/coreutils-8.20/work/coreutils-8.20/conftest[conftest:9365] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-apps/coreutils-8.20/work/coreutils-8.20/configure[configure:9364] uid/euid:0/0 gid/egid:0/0 Apr 22 22:04:45 inspiro kernel: grsec: denied resource overstep by requesting 75575296 for RLIMIT_AS against limit 5000000 for /var/tmp/portage/sys-apps/coreutils-8.20/work/coreutils-8.20/conftest[conftest:9365] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-apps/coreutils-8.20/work/coreutils-8.20/configure[configure:9364] uid/euid:0/0 gid/egid:0/0 Apr 22 22:04:45 inspiro kernel: grsec: denied resource overstep by requesting 142684160 for RLIMIT_AS against limit 5000000 for /var/tmp/portage/sys-apps/coreutils-8.20/work/coreutils-8.20/conftest[conftest:9365] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-apps/coreutils-8.20/work/coreutils-8.20/configure[configure:9364] uid/euid:0/0 gid/egid:0/0 Apr 22 22:04:45 inspiro kernel: grsec: more alerts, logging disabled for 10 seconds Apr 22 22:13:08 inspiro kernel: grsec: denied resource overstep by requesting 1000000 for RLIMIT_NOFILE against limit 1024 for /var/tmp/portage/sys-apps/grep-2.14/work/grep-2.14/conftest[conftest:14554] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-apps/grep-2.14/work/grep-2.14/configure[configure:14553] uid/euid:0/0 gid/egid:0/0 Apr 22 22:13:09 inspiro kernel: grsec: denied resource overstep by requesting 4294967295 for RLIMIT_NOFILE against limit 1024 for /var/tmp/portage/sys-apps/grep-2.14/work/grep-2.14/conftest[conftest:14575] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-apps/grep-2.14/work/grep-2.14/configure[configure:14574] uid/euid:0/0 gid/egid:0/0 Apr 22 22:33:52 inspiro kernel: cc1plus[11141]: segfault at 2ca3e833128 ip 0000000000c7bb54 sp 000003f97ccc2d50 error 4 in cc1plus[400000+c12000] Apr 22 22:33:52 inspiro kernel: grsec: Segmentation fault occurred at 000002ca3e833128 in /var/tmp/portage/sys-devel/gcc-4.6.3/work/build/gcc/cc1plus[cc1plus:11141] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-devel/gcc-4.6.3/work/build/gcc/xgcc[xgcc:11140] uid/euid:0/0 gid/egid:0/0 Apr 22 22:33:52 inspiro kernel: grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /var/tmp/portage/sys-devel/gcc-4.6.3/work/build/gcc/cc1plus[cc1plus:11141] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/sys-devel/gcc-4.6.3/work/build/gcc/xgcc[xgcc:11140] uid/euid:0/0 gid/egid:0/0 Apr 23 07:29:47 inspiro kernel: grsec: denied resource overstep by requesting 1000000 for RLIMIT_NOFILE against limit 1024 for /var/tmp/portage/net-misc/wget-1.14/work/wget-1.14/conftest[conftest:17001] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/net-misc/wget-1.14/work/wget-1.14/configure[configure:17000] uid/euid:0/0 gid/egid:0/0 Apr 23 07:29:47 inspiro kernel: grsec: denied resource overstep by requesting 4294967295 for RLIMIT_NOFILE against limit 1024 for /var/tmp/portage/net-misc/wget-1.14/work/wget-1.14/conftest[conftest:17022] uid/euid:0/0 gid/egid:0/0, parent /var/tmp/portage/net-misc/wget-1.14/work/wget-1.14/configure[configure:17021] uid/euid:0/0 gid/egid:0/0
config-3.8.3-hardened
Description: Binary data
