Re: [gentoo-hardened] what RLIMIT_STACK mean?

2008-11-08 Thread atoth
Some error messages like this shows up from time to time every twice months: " grsec: (root:U:/bin/rm) denied resource overstep by requesting 115310592 for RLIMIT_STACK against limit 8388608 for /[rm:32461] uid/euid:0/0 gid/egid:0/0, parent /usr/sbin/run-crons[run-crons:32446] uid/euid:0/0 gid/egid

Re: [gentoo-hardened] what RLIMIT_STACK mean?

2008-11-08 Thread pageexec
On 9 Nov 2008 at 0:40, Alex Efros wrote: > The problem is still here, I'm on latests hardened kernel: 2.6.25-hardened-r8. > Not sure about version of grsec/pax patches, probably it's easier for you > to check this, you should know where to look. :) hmm that's a bit too old kernel for us, can you

Re: [gentoo-hardened] what RLIMIT_STACK mean?

2008-11-08 Thread Alex Efros
Hi! On Sat, Nov 08, 2008 at 11:13:47PM +0200, [EMAIL PROTECTED] wrote: > is overstepped, the given process should get a segfault on all execution > paths that i checked yet it clearly hasn't happened according to the strace. yeah > so that leaves one option open, some bug/misreporting by grsec (or

Re: [gentoo-hardened] what RLIMIT_STACK mean?

2008-11-08 Thread pageexec
On 29 Sep 2008 at 19:57, Alex Efros wrote: > Didn't you think it's good idea to trace this issue? It may be a bug in > grsec... anyway, usual hardened system shouldn't produce such a warnings > in logs just because somebody call exec() from perl script or use qmail. sorry, i was busy with everyth