Re: [gentoo-hardened] PaX kills Tor due to overflow

2012-08-22 Thread PaX Team
On 22 Aug 2012 at 4:59, Maxim Kammerer wrote: > Yes! :) I did read that post, and what I (probably wrongly) gathered > from it was that the plugin was developed for 3 years, and finalized > by Emese Revfy during the last year. what we did 3 years ago was the macro hack, not much to do with the ne

Re: [gentoo-hardened] PaX kills Tor due to overflow

2012-08-21 Thread Maxim Kammerer
On Wed, Aug 22, 2012 at 2:19 AM, PaX Team wrote: > did your thorough search include the grsec mailing list archives? if > you google '"size_overflow" pax' then it's like the first hit there ;). Yes! :) I did read that post, and what I (probably wrongly) gathered from it was that the plugin was de

Re: [gentoo-hardened] PaX kills Tor due to overflow

2012-08-21 Thread PaX Team
On 22 Aug 2012 at 1:37, Maxim Kammerer wrote: > On Tue, Aug 21, 2012 at 11:44 PM, Anthony G. Basile > wrote: > > That sounds about right. I'm not hitting this with tor-ramdisk, a tiny > > ramdisk image for running tor relays, built with latest tor + busybox + > > hardened kernel. I have PAX_SIZ

Re: [gentoo-hardened] PaX kills Tor due to overflow

2012-08-21 Thread Maxim Kammerer
On Tue, Aug 21, 2012 at 11:44 PM, Anthony G. Basile wrote: > That sounds about right. I'm not hitting this with tor-ramdisk, a tiny > ramdisk image for running tor relays, built with latest tor + busybox + > hardened kernel. I have PAX_SIZE_OVERFLOW off. I didn't even try turning > it on since

Re: [gentoo-hardened] PaX kills Tor due to overflow

2012-08-21 Thread Anthony G. Basile
On 08/20/2012 01:59 PM, Pavel Labushev wrote: On Mon, 20 Aug 2012 16:16:27 +0100 Karl-Johan Karlsson wrote: My Tor node gets killed once every day or two with the following message in dmesg: PAX: size overflow detected in function tcp_recvmsg net/ipv4/tcp.c:1696 That's a size_overflow f

Re: [gentoo-hardened] PaX kills Tor due to overflow

2012-08-20 Thread Pavel Labushev
On Mon, 20 Aug 2012 16:16:27 +0100 Karl-Johan Karlsson wrote: > My Tor node gets killed once every day or two with the following message in > dmesg: > >PAX: size overflow detected in function tcp_recvmsg net/ipv4/tcp.c:1696 That's a size_overflow false positive. Try some of the recent grse

Re: [gentoo-hardened] PaX kills Tor due to overflow

2012-08-20 Thread Tóth Attila
It's because of the size_overflow plugin. Take a look at this bug: https://bugs.gentoo.org/show_bug.cgi?id=430906 It is promised to get fixed soon. Regards: Dw. -- dr Tóth Attila, Radiológus, 06-20-825-8057 Attila Toth MD, Radiologist, +36-20-825-8057 2012.Augusztus 20.(H) 17:43 időpontban Karl

Re: [gentoo-hardened] PaX kills Tor due to overflow

2012-08-20 Thread Karl-Johan Karlsson
On Monday 20 August 2012 11.26.15 Matthew Finkel wrote: > Are you running Tor as a relay or is is only used as a client? It's a relay. It's usually a client as well, but nobody is using that functionality at the moment. It is not an exit node. > Also, > what version of Tor and what version of th

Re: [gentoo-hardened] PaX kills Tor due to overflow

2012-08-20 Thread Matthew Finkel
On Mon, Aug 20, 2012 at 11:16 AM, Karl-Johan Karlsson wrote: > My Tor node gets killed once every day or two with the following message in > dmesg: > >PAX: size overflow detected in function tcp_recvmsg net/ipv4/tcp.c:1696 >Pid: 28327, comm: tor Not tainted 3.4.4-hardened-r1 #1 >Call T

[gentoo-hardened] PaX kills Tor due to overflow

2012-08-20 Thread Karl-Johan Karlsson
My Tor node gets killed once every day or two with the following message in dmesg: PAX: size overflow detected in function tcp_recvmsg net/ipv4/tcp.c:1696 Pid: 28327, comm: tor Not tainted 3.4.4-hardened-r1 #1 Call Trace: [] report_size_overflow+0x34/0x3e [] tcp_recvmsg+0x5fa/0x8