From: Douglas Ostling <chief@quasisoft.com>
Subject: Re: Better syscall handling
Date: Wed, 6 Jun 2001 10:12:56 -0700
Next Article (by Subject): Bilginize... marketing@ldp.org.tr
Previous Article (by Subject): Re: Better syscall handling Amon Ott
Top of Thread: Re: Better syscall handling Amon Ott
Articles sorted by: [Date]
[Author]
[Subject]
On Wed, Jun 06, 2001 at 09:35:26AM +0200, Amon Ott wrote: > On Mit, 06 Jun 2001 Douglas Ostling wrote: > > How would I go about creating better recovery for handling syscall > > interception? As things are now, the system slows down impossibly > > to the point of a hang. > > You are the first one ever reporting such a behaviour. It does not happen on > all PCs I ever used RSBAC on. > > What exactly happens on your system? > > Amon. This is an exact duplicate of the kernel syslog message from the most recent event of this nature while doing a recursive ftp download with wget from off the Interent: Jun 5 12:10:50 zone kernel: kernel BUG at vmalloc.c:236! Jun 5 12:10:50 zone kernel: invalid operand: 0000 Jun 5 12:10:50 zone kernel: CPU: 0 Jun 5 12:10:50 zone kernel: EIP: 0010:[__vmalloc+58/540] Jun 5 12:10:50 zone kernel: EFLAGS: 00010286 Jun 5 12:10:50 zone kernel: eax: 0000001d ebx: 00000000 ecx: c2208000 ed x: c05c31c0 Jun 5 12:10:50 zone kernel: esi: 00001f16 edi: c2209b64 ebp: c2209bb8 es p: c2209aa0 Jun 5 12:10:50 zone kernel: ds: 0018 es: 0018 ss: 0018 Jun 5 12:10:50 zone kernel: Process wget (pid: 7958, stackpage=c2209000) Jun 5 12:10:50 zone kernel: Stack: c01f83ab c01f848d 000000ec c2209b64 00001f1 6 c2209b64 c2209bb8 00000000 Jun 5 12:10:50 zone kernel: 00000000 00000000 c016f7c5 00000005 0000000 3 c1e184e0 00000001 c016f3ae Jun 5 12:10:50 zone kernel: c015d361 fffffe35 00000007 00000163 c016f3d 1 fffffe35 c2209b54 000001f4 Jun 5 12:10:50 zone kernel: Call Trace: [do_scan_sock+1241/1872] [do_scan_sock +194/1872] [rsbac_vkmalloc+105/112] [do_scan_sock+229/1872] [rsbac_adf_request_ ms+238/360] [iptable_mangle:__insmod_iptable_mangle_O/lib/modules/2.4.5-pre4/ke rnel/net+-52903/96] [iptable_mangle:__insmod_iptable_mangle_O/lib/modules/2.4.5 -pre4/kernel/net+-48320/96] Jun 5 12:10:50 zone kernel: [rsbac_adf_request_int+538/2536] [rsbac_adf _request_int+763/2536] [ip_queue_xmit+1128/1196] [iptable_mangle:__insmod_iptab le_mangle_O/lib/modules/2.4.5-pre4/kernel/net+-48320/96] [ip_queue_xmit2+0/544] [tcp_v4_send_check+106/168] [schedule+604/908] [rsbac_adf_request+60/68] Jun 5 12:10:50 zone kernel: [tcp_recvmsg+1686/1960] [inet_recvmsg+61/84 ] [sock_recvmsg+288/584] [rsbac_get_attr+178/3808] [sock_readv_writev+114/160] [sock_readv+50/56] [sock_readv+0/56] [do_readv_writev+831/1172] Jun 5 12:10:50 zone kernel: [sys_write+690/704] [sys_readv+63/80] [syst em_call+51/64] Jun 5 12:10:50 zone kernel: Jun 5 12:10:50 zone kernel: Code: 0f 0b 83 c4 0c 31 c0 e9 ce 01 00 00 6a 02 53 e8 8a fe ff ff Do you make sense of it? -- chief@quasisoft.com - Douglas Ostling - Q U A S I S O F T "For dignity compos'd and high exploit... all was false and hollow." --Milton, Paradist Lost II - To unsubscribe from the rsbac list, send a mail to majordomo@rsbac.org with unsubscribe rsbac as single line in the body.
Next Article (by Subject): Bilginize... marketing@ldp.org.tr
Previous Article (by Subject): Re: Better syscall handling Amon Ott
Top of Thread: Re: Better syscall handling Amon Ott
Articles sorted by: [Date]
[Author]
[Subject]