grsecurity 2.1.5 has been released for the 2.4.30 and 2.6.11.6 kernels. Changes in this release include: * UIDs and GIDs are now logged as unsigned integers * Fixed logging of resource names for architectures that define their own RLIMIT_* ordering (eg. sparc64, ia64) * Addition of always-reduce-path directive in learn_config * Writable library check in RBAC system is now only performed on regular files, fixing the unnecessary /dev/zero error some users reported * PaX updates, fixes mlock when segmexec is enabled with mprotect disabled on an application * Addition of missing logging for RLIMIT_CORE overstepping in the 2.6 patch * Fixed full learning gradm crash while generating a policy * Minor code cleanups and optimizations Update (03/09): The 2.6 patch has been updated for the 2.6.11.7 kernel. Reproducible: Always Steps to Reproduce: 1. 2. 3.
I noticed this. There are some problems with the kernel-2.eclass which are preventing me from bumping grsec-sources-2.4.30 Hopefully they will be resolved today.
I only reported it because AFAIK there are some security-related bugs solved in kernel 2.4.30, which are not solved in grsec-sources_2.4.29-2.1.3.
yes and thank you. I was just giving you a report on it's status right now.
I know, and thanks for you report!
this should have been resolved now. closing, if I am wrong please re-open.
will grsec-sources be marked stable soon?
stable on x86
