| View previous topic :: View next topic |
| Author |
Message |
kernelOfTruth
Watchman
Joined: 20 Dec 2005
Posts: 5345
Location: Vienna, Austria; Germany; hello world :)
|
 Posted: Sun May 20, 2007 10:07 am Post subject: |
 |
|
| ekerazha wrote: | | kernelOfTruth wrote: |
ever tried it with SEGMEXEC, PAGEEXEC + mprotect in conjunction with ati-drivers or nvidia-drivers, then you know that it's a no-go, and if you disable those parts, you work less secure than exec-shield
(you can check this with paxtest )
yeah, what a pity that it can't be used with binary graphics drivers, this would make some linux desktop even more secure 
furthermore wine doesn't work with SEGMEXEC as far as I know ... |
This is the reason because there's "paxctl". |
ah, well, yes, forgot, that I had tomboy.exe & some wine stuff running some time ago with it
does this also work with cxoffice?
nevertheless since lots of people use ati & nvidia-drivers and/or are dependend on those this would restrict the user base of that kernel to a big degree ... 
you tried beryl / compiz with pax? 
| Waninkoko wrote: | | Quote: | Changes since -v12:
- small tweak: made the "fork flow" of reniced tasks zero-sum
- debugging update: /proc/<PID>/sched is now seqfile based and echoing
0 to it clears the maximum-tracking counters.
- more debugging counters
- small rounding fix to make the statistical average of rounding errors
zero
- scale both the runtime limit and the granularity on SMP too, and make
it dependent on HZ
- misc cleanups |
|
thanks 
_________________
Unofficial minimal livecd x86/amd64 w/reiser4+truecrypt (by Neo2)
2.6.37.2_plus_v1: BFS, CFS,THP,compaction, zcache or TOI
Hardcore Linux user since 2004  |
|
| Back to top |
|
 |
ekerazha
n00b
Joined: 19 May 2007
Posts: 4
|
| Posted: Sun May 20, 2007 11:29 am Post subject: |
|
|
| kernelOfTruth wrote: | | ekerazha wrote: | | kernelOfTruth wrote: |
ever tried it with SEGMEXEC, PAGEEXEC + mprotect in conjunction with ati-drivers or nvidia-drivers, then you know that it's a no-go, and if you disable those parts, you work less secure than exec-shield
(you can check this with paxtest )
yeah, what a pity that it can't be used with binary graphics drivers, this would make some linux desktop even more secure
furthermore wine doesn't work with SEGMEXEC as far as I know ... |
This is the reason because there's "paxctl". |
ah, well, yes, forgot, that I had tomboy.exe & some wine stuff running some time ago with it
does this also work with cxoffice?
nevertheless since lots of people use ati & nvidia-drivers and/or are dependend on those this would restrict the user base of that kernel to a big degree ...
you tried beryl / compiz with pax?
|
Have I already said "this is the reason because there's paxctl"? |
|
| Back to top |
|
|
gAzo0o
n00b
Joined: 22 Feb 2006
Posts: 22
|
| Posted: Tue May 22, 2007 9:15 pm Post subject: |
|
|
| Can I request squashfs support or some patch... the official ones doesn't apply cleanly. |
|
| Back to top |
|
|
buddabrod
Apprentice
Joined: 15 Oct 2006
Posts: 241
Location: Germany
|
|
| Back to top |
|
|
Waninkoko
Guru
Joined: 13 May 2005
Posts: 549
|
| Posted: Wed May 23, 2007 5:59 pm Post subject: |
|
|
Preparing a hotfix...
Thanks. |
|
| Back to top |
|
|
kernelOfTruth
Watchman
Joined: 20 Dec 2005
Posts: 5345
Location: Vienna, Austria; Germany; hello world :)
|
|
| Back to top |
|
|
priestjim
Tux's lil' helper
Joined: 09 Jan 2005
Posts: 100
Location: Never never land
|
| Posted: Thu May 24, 2007 7:50 pm Post subject: |
|
|
Wait for v15, judging by the discussion on lkml, it should be better
_________________
My soul is my antenna, I am the instrument + the guitar is my amplifier.
-- Ottmar Liebert |
|
| Back to top |
|
|
vipernicus
Veteran
Joined: 17 Jan 2005
Posts: 1462
Location: Your College IT Dept.
|
| Posted: Fri May 25, 2007 1:03 am Post subject: |
|
|
| priestjim wrote: | | Wait for v15, judging by the discussion on lkml, it should be better |
I hope so, v14 still makes my mouse lag under load, even when portage and make are reniced to 19.
_________________
Viper-Sources Maintainer || nesl247 Projects || vipernicus.org blog |
|
| Back to top |
|
|
creidiki
Apprentice
Joined: 23 Mar 2007
Posts: 283
Location: Varese (Italy)
|
|
| Back to top |
|
|
buddabrod
Apprentice
Joined: 15 Oct 2006
Posts: 241
Location: Germany
|
| Posted: Tue May 29, 2007 2:18 am Post subject: |
|
|
hm.. suspend2ui_* doens't work anymore. Didn't use suspend2 for a long time now, but i'm quite sure that its ui worked with 2.6.19 at least.
Does anyone else have that problem?
I'm sure that everything is configured correctly since i checked it twice..
Logfile doesn't show anything usefull |
|
| Back to top |
|
|
bollucks
l33t
Joined: 27 Oct 2004
Posts: 606
|
| Posted: Tue May 29, 2007 10:00 am Post subject: |
|
|
| creidiki wrote: | http://lkml.org/lkml/2007/5/25/270
 |
Given that people are still having problems with CFS like mouse stalling, 3d games being better with SD etc., it's sad that Linus is just going to merge it. I guess Linus believes this is a case of silence must mean everything is ok... |
|
| Back to top |
|
|
buddabrod
Apprentice
Joined: 15 Oct 2006
Posts: 241
Location: Germany
|
| Posted: Tue May 29, 2007 11:01 am Post subject: |
|
|
| bollucks wrote: | | creidiki wrote: | http://lkml.org/lkml/2007/5/25/270
|
Given that people are still having problems with CFS like mouse stalling, 3d games being better with SD etc., it's sad that Linus is just going to merge it. I guess Linus believes this is a case of silence must mean everything is ok... |
My last issues were with v8 or earlier, no regressions since then. |
|
| Back to top |
|
|
exa_einstein
n00b
Joined: 18 Feb 2005
Posts: 21
|
| Posted: Tue May 29, 2007 2:27 pm Post subject: |
|
|
Great work, keep moving!
btw, I just realized this is the only usable kernel with mac80211 layer AND with suspend2. Saved me a lot of work thx! |
|
| Back to top |
|
|
kernelOfTruth
Watchman
Joined: 20 Dec 2005
Posts: 5345
Location: Vienna, Austria; Germany; hello world :)
|
| Posted: Tue May 29, 2007 3:34 pm Post subject: |
|
|
| buddabrod wrote: | | bollucks wrote: | | creidiki wrote: | http://lkml.org/lkml/2007/5/25/270
|
Given that people are still having problems with CFS like mouse stalling, 3d games being better with SD etc., it's sad that Linus is just going to merge it. I guess Linus believes this is a case of silence must mean everything is ok... |
My last issues were with v8 or earlier, no regressions since then. |
I had my last lags with v12, v13 worked fine, v14 seems a little sluggish but I'm confident that v15 will be a "burner"
_________________
Unofficial minimal livecd x86/amd64 w/reiser4+truecrypt (by Neo2)
2.6.37.2_plus_v1: BFS, CFS,THP,compaction, zcache or TOI
Hardcore Linux user since 2004 |
|
| Back to top |
|
|
Phlogiston
Veteran
Joined: 27 Jan 2004
Posts: 1925
Location: Europe, Swizerland
|
| Posted: Wed May 30, 2007 6:57 am Post subject: |
|
|
Could you try to add this hdaps patch from linuxpowertop?
_________________
Workstation: 5.1 SurroundSound, LIRC remote control; Laptop [IBM-T43]: patched sources, s2disk/ram, fingerprint sensor |
|
| Back to top |
|
|
Phlogiston
Veteran
Joined: 27 Jan 2004
Posts: 1925
Location: Europe, Swizerland
|
| Posted: Wed May 30, 2007 7:36 am Post subject: |
|
|
This kernel stops just booting somewhere after suspend2. A strange message I noticed: "request_module: runaway loop modprobe binfmt-0000"
Any idea?
_________________
Workstation: 5.1 SurroundSound, LIRC remote control; Laptop [IBM-T43]: patched sources, s2disk/ram, fingerprint sensor |
|
| Back to top |
|
|
Phlogiston
Veteran
Joined: 27 Jan 2004
Posts: 1925
Location: Europe, Swizerland
|
| Posted: Wed May 30, 2007 1:05 pm Post subject: |
|
|
I thought it could have to do with module loading, but at that state the kernel can't load any modules yet. If you google you'll find some interesting things, but I couldn't find a solution yet.
Here is my kernel config:
http://pastebin.ca/522501
Thanks for any help!
_________________
Workstation: 5.1 SurroundSound, LIRC remote control; Laptop [IBM-T43]: patched sources, s2disk/ram, fingerprint sensor |
|
| Back to top |
|
|
Waninkoko
Guru
Joined: 13 May 2005
Posts: 549
|
|
| Back to top |
|
|
buddabrod
Apprentice
Joined: 15 Oct 2006
Posts: 241
Location: Germany
|
| Posted: Wed May 30, 2007 1:11 pm Post subject: |
|
|
Try without HIGHMEM set?
How large is your ram? |
|
| Back to top |
|
|
Phlogiston
Veteran
Joined: 27 Jan 2004
Posts: 1925
Location: Europe, Swizerland
|
| Posted: Wed May 30, 2007 1:33 pm Post subject: |
|
|
| buddabrod wrote: | Try without HIGHMEM set?
How large is your ram? |
My ram is about 1.5GB 
_________________
Workstation: 5.1 SurroundSound, LIRC remote control; Laptop [IBM-T43]: patched sources, s2disk/ram, fingerprint sensor |
|
| Back to top |
|
|
Phlogiston
Veteran
Joined: 27 Jan 2004
Posts: 1925
Location: Europe, Swizerland
|
| Posted: Wed May 30, 2007 1:35 pm Post subject: |
|
|
For me that does not look like a fix. Furthermore this is in kernel already and of course this is exact the code that created the output!
_________________
Workstation: 5.1 SurroundSound, LIRC remote control; Laptop [IBM-T43]: patched sources, s2disk/ram, fingerprint sensor |
|
| Back to top |
|
|
Waninkoko
Guru
Joined: 13 May 2005
Posts: 549
|
| Posted: Wed May 30, 2007 5:29 pm Post subject: |
|
|
| Phlogiston wrote: |
For me that does not look like a fix. Furthermore this is in kernel already and of course this is exact the code that created the output! |
The code in the patch is not the same code that is in kernel.
The function "dump_stack()" (which fixes the problem) doesn't exist in vanilla kernel. |
|
| Back to top |
|
|
Phlogiston
Veteran
Joined: 27 Jan 2004
Posts: 1925
Location: Europe, Swizerland
|
| Posted: Thu May 31, 2007 7:06 am Post subject: |
|
|
| Waninkoko wrote: | | Phlogiston wrote: |
For me that does not look like a fix. Furthermore this is in kernel already and of course this is exact the code that created the output! |
The code in the patch is not the same code that is in kernel.
The function "dump_stack()" (which fixes the problem) doesn't exist in vanilla kernel. |
hmm ok, but dump_stack() in my opinion does something else then fixing a problem. However I missed the {} which changes the sense of the if clause. So I'll give it a try now.
_________________
Workstation: 5.1 SurroundSound, LIRC remote control; Laptop [IBM-T43]: patched sources, s2disk/ram, fingerprint sensor |
|
| Back to top |
|
|
Phlogiston
Veteran
Joined: 27 Jan 2004
Posts: 1925
Location: Europe, Swizerland
|
| Posted: Fri Jun 01, 2007 7:48 am Post subject: |
|
|
| Phlogiston wrote: |
hmm ok, but dump_stack() in my opinion does something else then fixing a problem. However I missed the {} which changes the sense of the if clause. So I'll give it a try now. |
That small modification did not solve the problem. I still can't boot that kernel.
_________________
Workstation: 5.1 SurroundSound, LIRC remote control; Laptop [IBM-T43]: patched sources, s2disk/ram, fingerprint sensor |
|
| Back to top |
|
|
|
Unsupported Software
