From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.comp.sysutils.supervision.general/671 Path: main.gmane.org!not-for-mail From: Gerrit Pape Newsgroups: gmane.comp.sysutils.supervision.general Subject: Re: runit running under linux 2.4 with openwall patches Date: Fri, 21 Jan 2005 19:32:48 +0000 Message-ID: <20050121193151.5581.qmail@f99cf6af5269a6.315fe32.mid.smarden.org> References: NNTP-Posting-Host: deer.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1106335896 8089 80.91.229.6 (21 Jan 2005 19:31:36 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Fri, 21 Jan 2005 19:31:36 +0000 (UTC) Original-X-From: supervision-return-910-gcsg-supervision=m.gmane.org@list.skarnet.org Fri Jan 21 20:31:31 2005 Return-path: Original-Received: from antah.skarnet.org ([212.85.147.14]) by deer.gmane.org with smtp (Exim 3.35 #1 (Debian)) id 1Cs4VH-0002Po-00 for ; Fri, 21 Jan 2005 20:31:31 +0100 Original-Received: (qmail 26666 invoked by uid 76); 21 Jan 2005 19:31:51 -0000 Mailing-List: contact supervision-help@list.skarnet.org; run by ezmlm List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Archive: Original-Received: (qmail 26661 invoked from network); 21 Jan 2005 19:31:51 -0000 Original-To: supervision@list.skarnet.org Mail-Followup-To: supervision@list.skarnet.org Content-Disposition: inline In-Reply-To: Xref: main.gmane.org gmane.comp.sysutils.supervision.general:671 X-Report-Spam: http://spam.gmane.org/gmane.comp.sysutils.supervision.general:671 On Thu, Jan 20, 2005 at 03:14:38PM -0700, Vincent Danen wrote: > One of the features of openwall is stack protection. I'm getting this > when I try to boot into a 2.4.29 kernel with openwall hardening > enabled: > > Security: return onto stack from 0x0804812c to 0xbffffea0 running as > UID 0, EUID 0, process runit:1 > Security more returns onto stack, logging disabled for a minute > > I can manage to make the kernel boot, but runit isn't running and it's > consuming 100% cpu in my vmware test machine. Hm, I don't know the openwall patch and what in runit.c could cause this. > I'd like to be able to have both runit and this feature together; I > think it should be possible because the traditional init works with it. > Any ideas on how to go about this? Did you link the runit program statically with the dietlibc? If so, you could try to compile it the same way as the working /sbin/init, to be sure it's not the compiler or libc causing the problem. Regards, Gerrit.