Bug 24245 – grsec ifdefs slows down kernel compile

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description mlmoser 2003-07-10 14:03:24 UTC]

One little patch, on an i386 the grsecurity patch checks if something is
defined, and either way defines something else.  Then it immediately checks if
it is NOT defined, and if something ELSE is not defined, and either way sets
that same thing.  As a result, if grsecurity's PaX settings aren't enabled, you
get a few hundred megabytes of warnings spewed to your console.  Also, it takes
a few seconds on a fast (1.8 Ghz Athlon XP, 512 MB DDR) CPU to trace back the
whole include line, so it severely slows down kernel compiles.

[Comment 1 mlmoser 2003-07-10 14:06:09 UTC]

Created attachment 14354 [details, diff]
chdir to linux-2.4.20-gentoo-r5/include/asm-i386 and patch processor.h with this

This was diff'd inside linux-2.4.20-gentoo-r5/asm-i386/ against processor.h, so
apply it accordingly.  I didn't make a proper patch I'm sure ;-)  But it should
work.  If it won't apply, open it in vi and look, it shows easy enough what to
do.  I'm new at this.

--Bluefox

[Comment 2 solar (RETIRED) 2003-07-10 21:55:49 UTC]

pfeifer you maintain the gentoo-sources?

[Comment 3 Jay Pfeifer (RETIRED) 2003-07-10 23:09:43 UTC]

yeah, this needs to be fixed. i'll get it fixed and bump to -r6 with other fixes. i'll have to go 
through the history to find out how it got in. but, i just want to get it fixed less the 
unneeded comments in the presented diff. 
 
Jay 
 
 

[Comment 4 Jay Pfeifer (RETIRED) 2004-03-18 19:02:08 UTC]

this seems to be something fixed long ago... closing.