Re: [gentoo-hardened] what RLIMIT_STACK mean?

[atoth@atoth.sote.hu]

I'm using the latest hardened kernel. I've switched to 2.6.27 on Sunday.
I have /bin/rm only in one daily cron job. And this error message is not
reproducible in a repetitive manner. These error messages showed up in the
logs once per every second months. I try to find a way to trigger it, but
I'm not sure about my success.

It would be good from Alex to provide his recipe for me to try out.

Regards,
Dwokfur
-- 
dr Tóth Attila, Radiológus Szakorvos jelölt, 06-20-825-8057, 06-30-5962-962
Attila Toth MD, Radiologist in Training, +36-20-825-8057, +36-30-5962-962

On Vas, November 9, 2008 12:44, pageexec@freemail.hu wrote:
> On 9 Nov 2008 at 0:06, atoth@atoth.sote.hu wrote:
>
>> Some error messages like this shows up from time to time every twice
>> months:
>> "
>> grsec: (root:U:/bin/rm) denied resource overstep by requesting 115310592
>> for RLIMIT_STACK against limit 8388608 for /[rm:32461] uid/euid:0/0
>> gid/egid:0/0, parent /usr/sbin/run-crons[run-crons:32446] uid/euid:0/0
>> gid/egid:0/0
>> "
>> That might be related to the same issue.
>
> what's your kernel version? and if it's not .27.x, can you test there as
> well?
> also can you reproduce it with even more trivial things like pwd?
>
>