Re: [gentoo-hardened] Kernel panic on openvpn connection

[pageexec@freemail.hu]

On 25 Apr 2006 at 13:06, Jean-Pierre Schwickerath wrote:
> > looking at the diff between r5 and r6 i only see grsec related
> > changes, so that could be the culprit. would it be possible to
> > try the latest grsec patch alone (it's in grsecurity.net/~spender )?
> 
> I compile gentoo-sources-2.6.14-r7 and added
> grsecurity-2.1.9-2.6.14.7-200602141849.patch
> I couldn't make that kernel crash... 

note that the grsec patch applies on top of vanilla sources, gentoo
sources may interfere (so you may have just gotten lucky here).

> I'll try this afternoon to add various other patches from the
> hardened-patches-2.6.14-7.extras.tar.bz2 series to see which one is
> responsible. 

i decoded the oops stack trace and it seems that the code where the
problem triggered (not necessarily the culprit) has something to do
with netfilter/bridging/ipv6. are there known problems in that area?

-- 
gentoo-hardened@gentoo.org mailing list