A case of actual protection of my Gentoo box by Grsecurity

miroR · l33t Joined: 05 Mar 2008 Posts: 826

Long time on from:
https://forums.gentoo.org/viewtopic-t-905472-highlight-miror.html
where I discovered what the other the NSA's solution for "securing" your system was...
I think I now might have a case in hand for Grsecurity doing great work to defend my systems.

Pls. go and find out for yourself:
https://forums.grsecurity.net/viewtopic.php?f=3&t=3709&sid=60bf798f0831a707c94fd20467647e01
grsec: halting the system due to suspicious kernel crash

I am dead tired and long due to other obligations in life currently, so I won't be soon to respond if anybody is interested to exchange opinions here.
I will be back, just pls. allow longer time.

Thank you!

PaulBredbury · Watchman Joined: 14 Jul 2005 Posts: 7310

You've found a use-after-free bug, and spun it into the NSA trying to hack you?! Why so paranoid?

miroR · l33t Joined: 05 Mar 2008 Posts: 826

broken_chaos · Posted: Fri Aug 23, 2013 5:51 pm Post subject:

There's a difference between "hacking people" and "hacking you". There's a much large number of criminals trying to take over servers for various sorts of botnets than there is NSA.

Plus it sounds like you just ran into a bug in the NFS stack, not an attack.

sikpuppy · Posted: Sat Aug 24, 2013 12:53 pm Post subject:

Oh no, it's back. A total nutbar.

desultory · Administrator Joined: 04 Nov 2005 Posts: 9154

wswartzendruber · Posted: Mon Aug 26, 2013 5:12 am Post subject:

SELinux doesn't seem all that bad to me, other than it's about containing a bomb after it's already gone off. I'd rather try to keep the bomb from going off in the first place.

Oh and the kernel devs might want to know about your NFS issue.

Bones McCracker · Veteran Joined: 14 Mar 2006 Posts: 1609 Location: U.S.A.

wswartzendruber · Posted: Mon Aug 26, 2013 2:05 pm Post subject:

Aren't use-after-free errors pretty common? It's a memory management issue. The kernel is written in C. It seems obvious to me.

sikpuppy · Posted: Mon Aug 26, 2013 2:30 pm Post subject:

Bones McCracker · Veteran Joined: 14 Mar 2006 Posts: 1609 Location: U.S.A.

It's okay, that's where it belonged anyway.

_________________

miroR · l33t Joined: 05 Mar 2008 Posts: 826

The only reason why I didn't reply before is because I was really busy, and still am.
And there isn't anymore need now that it's misplaced.
Off the walll?

Who's nut here.

Really couldn't be back so soon even it it was were it belonged.
Not here.

Thanks!

Miroslav Rovis

sikpuppy · Posted: Tue Aug 27, 2013 7:27 am Post subject:

Bones McCracker · Veteran Joined: 14 Mar 2006 Posts: 1609 Location: U.S.A.

He's saying, "I'd have checked back sooner but I've been busy. What's this 'Off The Wall' shit? You guys are the nuts, not me. Not going to bother, now that my post has been sloughed off from where it belonged into batshit-land."
_________________

notageek · Posted: Tue Aug 27, 2013 9:55 am Post subject:

_________________
"Defeat is a state of mind. No one is ever defeated, until defeat has been accepted as a reality." -- Bruce Lee

sikpuppy · Posted: Tue Aug 27, 2013 11:32 am Post subject:

Thanks BablefishKracker.

Prenj · n00b Joined: 20 Nov 2011 Posts: 16

Bones McCracker · Veteran Joined: 14 Mar 2006 Posts: 1609 Location: U.S.A.

notageek · Posted: Tue Aug 27, 2013 2:20 pm Post subject:

_________________
"Defeat is a state of mind. No one is ever defeated, until defeat has been accepted as a reality." -- Bruce Lee

miroR · l33t Joined: 05 Mar 2008 Posts: 826

I'm glad to present to the Gentoo crowd, but I really, really don't believe that it consists only of sceptics and people of poor moral habits, or people being temporarily incosiderate like some of the above, more on ths case that I believe [1] is possibly another bug-after-free in my Gentoo machine:

grsec: halting the system due to suspicious kernel crash
https://forums.grsecurity.net/viewtopic.php?f=3&t=3709&p=14456#p14456

Miroslav Rovis
Zagreb, Croatia
www.CroatiaFidelis.hr

[1] the Q is instead of "?" in the name of the image; the name of the image is in the address of the image seen in the http address given *there*

energyman76b · Advocate Joined: 26 Mar 2003 Posts: 2045 Location: Germany

you are, of course, correct.

There are moral people here, who love to look at a problem from all sides and are able and willing to consider all possible causes. Not everybody is a morally bankrupt plutocrat like BK or a degenerate like cokehabit or Notageek - who is still fighting his noble heritage. So sad. So sad....

I for example am a national socialist/Strasserist. As such I am the epitome of morality and thoughtful behaviour.

So think a bit when I tell you this:

you are suffering from memory corruption. Get ECC ram and a mobo supporting it. If you still have that problem, you might have found a bug.

Until then: holy molly thread necro'ing!
_________________
Study finds stunning lack of racial, gender, and economic diversity among middle-class white males

I identify as a dirty penismensch.

Bones McCracker · Veteran Joined: 14 Mar 2006 Posts: 1609 Location: U.S.A.

Don't listen to energyman76b; he doesn't know what he's talking about. That error screen says right on it what's going on. You tried to de-reference a null pointer. That's a software problem, not a hardware problem, and there's no way ECC RAM or anything else is going to "correct" it.
_________________