Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 195515

Summary: sys-kernel/hardened-sources-2.6.22-r7 kernel loses clock - around 10 seconds per minute
Product: Gentoo Linux Reporter: Roy Marples (RETIRED) <uberlord>
Component: HardenedAssignee: The Gentoo Linux Hardened Team <hardened>
Status: RESOLVED INVALID    
Severity: normal CC: kernel, pageexec
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---
Attachments: 2.6.20-hardened-r10.config (clock works)
2.6.22-hardened-r7.config (clock fails)

Description Roy Marples (RETIRED) gentoo-dev 2007-10-11 16:47:11 UTC
2.6.20-r10 does not.
ntpd runs on the machine, and cannot update the clock fast enough to keep sync. This is not an issue for 2.6.20-r10.

Configs to follow
Comment 1 Roy Marples (RETIRED) gentoo-dev 2007-10-11 16:47:38 UTC
Created attachment 133159 [details]
2.6.20-hardened-r10.config (clock works)
Comment 2 Roy Marples (RETIRED) gentoo-dev 2007-10-11 16:48:04 UTC
Created attachment 133161 [details]
2.6.22-hardened-r7.config (clock fails)
Comment 3 Christian Heim (RETIRED) gentoo-dev 2007-10-11 16:56:26 UTC
Any idea pipacs ?
Comment 4 PaX Team 2007-10-11 18:08:24 UTC
uhm, not a clue, i/we don't touch much code on amd64, i can't image what would cause such an effect... i take it that vanilla/non-hardened/grsec-off all work fine on the same box?
Comment 5 Roy Marples (RETIRED) gentoo-dev 2007-10-11 18:20:37 UTC
(In reply to comment #4)
> i take it that vanilla/non-hardened/grsec-off all work fine on the same box?

No idea. It would take time to test as I can't reboot into new kernels too often.

Comment 6 Kevin F. Quinn (RETIRED) gentoo-dev 2007-10-17 06:39:30 UTC
kernel: could someone on amd64 check vanilla- or gentoo-sources-2.6.20-r10 against 2.6.22-r7 with Uberlord's configs, please?  The configs should work, just the CONFIG_PAX* and CONFIG_GRKERNSEC* settings are irrelevant on vanilla/gentoo-sources.

uberlord: presumably simply typing "date" a minute apart will shows problem?  10 seconds a minute should be easily noticeable!
Comment 7 Daniel Drake (RETIRED) gentoo-dev 2007-10-17 07:56:33 UTC
that wouldn't be a meaningful test -- this stuff is bound to be heavily hardware related, not config based.
Comment 8 Roy Marples (RETIRED) gentoo-dev 2007-10-17 08:50:43 UTC
Well, my test was that every few minutes, `ntpq -p` would show offsets increasing at a rate of knots, too much for it to sync to.
Comment 9 Roy Marples (RETIRED) gentoo-dev 2007-10-24 08:53:47 UTC
This appears to have been a configuration issue at my end - sorry.