Re: [WOLK-announce] Re: [ANNOUNCE] WOLK v4.15s FINAL - Server Edition (aka get the 2.6 feeling with 2.4 :p)

Marc-Christian Petersen <[email protected]> Wed, 30 Jun 2004 16:05:19 +0200
Newsgroups gmane.linux.wolk.devel
Organization Working Overloaded Linux Kernel
Message-ID <200406301605.19399@WOLK>
--Boundary-00=_fis4ANXgGlq2ilx
Content-Type: text/plain;
  charset="iso-8859-15"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

On Tuesday 29 June 2004 21:43, Mike Bethune wrote:

Hi Mike,

> don't want to be killed :), but grsec is spewing these:

hehe :)


> "... attempted resource overstep by requesting 8192 for RLIMIT_MEMLOCK
> against limit 4096 ..." for almost everything now (same config worked great
> with 4.14)...(sent to marc) doesn't appear to affect anything, just a wrong
> warning message maybe.

Please try attached patch.


> also, this looks weird:
> #ifdef CONFIG_SCHED_DESKTOP
> struct cache_limits cache_limits = {
>         .min = 1,
>         .borrow = 10,
>         .max = 10,
> };
> #else
> struct cache_limits cache_limits = {
>         .min = 1,
>         .borrow = 10,
>         .max = 10,
> };
> #endif
> should one be: ?
> struct cache_limits cache_limits = {
>         .min = 1,
>         .borrow = 15,
>         .max = 100,
> };

no. These things were left in from my 1 month messing up with the VM and the 
final best numbers [tm] were 1 10 10 for everything. Every other numbers are 
braindead for rmap.

ciao, Marc

--Boundary-00=_fis4ANXgGlq2ilx
Content-Type: text/x-diff;
  charset="iso-8859-15";
  name="bla.patch"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename="bla.patch"

--- old/grsecurity/gracl_res.c	2004-06-29 13:29:05.000000000 +0200
+++ new/grsecurity/gracl_res.c	2004-06-30 16:03:40.000000000 +0200
@@ -38,7 +38,7 @@ gr_log_resource(const struct task_struct
 
 	if (unlikely(((gt && wanted > task->rlim[res].rlim_cur) ||
 		      (!gt && wanted >= task->rlim[res].rlim_cur)) &&
-		     task->rlim[res].rlim_cur != RLIM_INFINITY))
+		     task->rlim[res].rlim_cur != PAGE_SIZE))
 		security_alert(GR_RESOURCE_MSG, wanted, restab_log[res],
 			       task->rlim[res].rlim_cur, task->comm,
 			       task->pid, task->uid, task->euid,

--Boundary-00=_fis4ANXgGlq2ilx--


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
WOLK - Working Overloaded Linux Kernel
[email protected]
https://lists.sourceforge.net/lists/listinfo/wolk-devel