Strange Gentoo Hardened Crash[SOLVED]

Ov3nCleaner · n00b Joined: 02 Nov 2006 Posts: 12

UPDATE:

Re installed gentoo fresh from stage 3 hardened. updated everything(running correct GCC and libc now), installed xorg.

The crashes i found can be outside of Xorg(but once xorg is started, crashes come faster). i tried removing GRsecurity(no difference). I think removing pax would be useless, as symptoms of pax issues can be solved with paxtcl etc. and pax issues always are at the programs init. udev is still freezing half the time upon initialization

Im absolutely clueless as to what is causing my machine to crash(checked all logs, absolutely nothing just a 100% freeze). is there someway i can debug my kernel from another computer to trace the problem? i am willing to do anything to kill this bug :X

Rebuilding kernel with crash dumps enabled... if that will do any good
_________________________________________________________________

i just switched to gentoo hardened, got all the pax bugs worked out. For some reason Xorg keeps crashing a few minutes into use, regardless of driver. I am using no GrSecurity anymore, just pax.

I have tried these drivers:
vesa
nv
nvidia

and all of them crash a few minutes in.
My computer has been acting a bit supsicious lately, killed 2 hard drivers, and pci randomly starts and stops working, Udev also acts strange
I checked for logs, and got nothing. When the comp freezes, i cant even ssh in. I havnt overclocked or done anything strange with the hardware either.
Anyone have any suggestions i would appreciated them >.>

PS this did not happen before hardened gentoo(but ill check with a livecd), and i read all the hardened documentation.

Sadako · Posted: Tue Apr 10, 2007 12:15 am Post subject:

I've been using xorg extensively on a fully hardened machine without any problems for almost a year,
and pretty much the only grsec option I don't have enabled is "Disable privileged I/O",
so I wouldn't be so sure that hardened is really the root cause of the problem.

When you say you got all the pax bugs worked out, what do you mean?

How did you switch to hardened, i.e. did you do a clean install with a hardened tarball,
or just emerge -e world with the hardened toolchain?

Does dmesg report anything when it crashes?
Could you post your xorg.conf and /var/log/Xorg.0.log, and maybe your emerge --info, or anything else that could be relevant?

Also, could you try starting x with the following command

Ov3nCleaner · n00b Joined: 02 Nov 2006 Posts: 12

emerge --info
http://pastebin.ca/432033

Xorg.0.log with the nvidia driver (i can get you nv and vesa if you want) basicly, nothing here.
http://pastebin.ca/432034

xorg.conf
http://pastebin.ca/432044
Ignore the extra nVidia stuff, it was generated by the closed driver, and when i use vesa and nv, i disable twin view, and change the driver

Kenrel Configuration
http://pastebin.ca/432041

dmesg:
http://pastebin.ca/432052

I installed gentoo from the live cd, switched to the hardened profile, build the hardened-sources, then i did:

"To maintain a consistant toolchain, first emerge binutils gcc virtual/libc. Next, rebuild the entire system with emerge -e world. All future packages will be built with PIE/SSP."

When i said pax bugs worked out, i meant making programs not being "Killed" when started, disabling a few things on xorg and the likes

All worked just fine...

Here is what i get from Xorg crash(basicly nothing):

Sadako · Posted: Tue Apr 10, 2007 1:48 am Post subject:

I can see a problem immediately with the very first line of your emerge --info; you're using gcc 4.* and glibc 2.4.*, neither of which work in hardened yet, and should be masked by the hardened profile.

So first thing, you need to check to see what profile you are using, what does

Ov3nCleaner · n00b Joined: 02 Nov 2006 Posts: 12

lrwxrwxrwx 1 root root 39 Apr 7 07:35 /etc/make.profile -> /usr/portage/profiles/hardened/x86/2.6/

[1] i686-pc-linux-gnu-3.3.6
[2] i686-pc-linux-gnu-3.4.6
[3] i686-pc-linux-gnu-3.4.6-hardenednopie
[4] i686-pc-linux-gnu-3.4.6-hardenednopiessp
[5] i686-pc-linux-gnu-3.4.6-hardenednossp
[6] i686-pc-linux-gnu-3.4.6-vanilla
[7] i686-pc-linux-gnu-4.1.1 [32;01m*[0m

gahhh i remember something about libc not building a while back... shoudlnt have ignored that... it wouldnt let me downgrade, so im not currently using a hardened one. do you recomend i reinstall from one of the hardened stages?

Sadako · Posted: Tue Apr 10, 2007 2:30 am Post subject:

Ov3nCleaner · n00b Joined: 02 Nov 2006 Posts: 12

just reinstalled using the stage 3 2006.0 hardened. Thanks for all the help, i really appreciate it

Ov3nCleaner · n00b Joined: 02 Nov 2006 Posts: 12

read the update

Sadako · Posted: Thu Apr 12, 2007 2:24 pm Post subject:

Sorry to hear this still isn't working out for you.

First of all, your new `emerge -v --info`, please.

Could you give more information on these non-X apps crashing, for instance do they segfault,
or just silently drop back to the shell prompt with no errors, or do they lock up the whole machine, cause a kernel panic or whatever.

Anyway, it does kind of look more like a hardware problem. You've never had any problems before hardened?

I'd suggest using a livecd with X (knoppix or the like), load it up and see if you can get it to crash,
make sure you do a lot of reading from and writing to the disks, and whatever else you can think of to stress the system.
`nice -n -19 cat /dev/urandom > /dev/null` should push the cpu, run two instances in parallel as you have a dual core chip, although if you managed to do an emerge -e world without problems then this is probably not the issue.

You should definitely run memtest86 for a while.

Does running lshw or lspci cause any problems, or show up anything interesting?
_________________
"You have to invite me in"

BlackEdder · Posted: Thu Apr 12, 2007 2:37 pm Post subject: Re: Strange Gentoo Hardened Crash

Ov3nCleaner · n00b Joined: 02 Nov 2006 Posts: 12

ahhh i upgraded to hardened-sources 2.6.19-r6 and everything works great! nm, solved