On 8 Feb 2008 at 9:10, wrote:

> 1. ok today i make kernel with your recomends, and run him for 2 days
> 2. I have this problem in two-cores processor (In one-core all works
> always normally).
> I think processor type settings maybe as a problem, but I'm not sure:-)

that's an indication that the problem is probably SMP related,
like some race condition (there's another gentoo bug that also
occured on SMP only so far but i unfortunately i couldn't reproduce
it either yet).

--
gentoo-hardened@lists.gentoo.org mailing list

On 8 Feb 2008 at 17:36, wrote:

> Kernel with KALLSYMS work very slow
> And now, network connections work very slowly, ftp-transfer = 1.7-4.5 Mb/s,
> kernel recompilation very slowly too, 1 string in 2 seconds.

you must have changed something else as well, kernel symbols don't
affect code execution . check power management settings maybe,
they can affect CPU speed.

--
gentoo-hardened@lists.gentoo.org mailing list

Kernel with KALLSYMS work very slow
And now, network connections work very slowly, ftp-transfer = 1.7-4.5 Mb/s,
kernel recompilation very slowly too, 1 string in 2 seconds.

�лек�ей Ле�ов�кий пишет:
I make kernel with CONFIG_KALLSYMS (and some settings will enabled by
defaults), and run him, but I have another problem
when I strating emerge (--sync or -pv or -f or simple emerge packet) I
got


sem_post: Invalid argument
sem_post: Invalid argument
...^C
Traceback (most recent call last):
File "/usr/bin/emerge", line 6, in ?
import sys
KeyboardInterrupt

Other commands, ls, mount, mv, cp, cd, nano, for example work correctly
and apache did work slowly (pages in browser loads with some delays)

pageexec@freemail.hu пишет:

On 7 Feb 2008 at 9:25, wrote:


now system works with non-PaX kernel, I can't restart system often,
and can't attach screenshot of error-message, or make it on next
weekend (9-10Feb)



it's fine, whenever you have time. make sure you enable CONFIG_KALLSYMS
(iirc, you have to disable HIDESYM in grsec for that).



PS: if you enable HIGHMEM64G/PAGEEXEC then PaX will make use of
the NX bit.

1. PaX or incorect settings in "Processor type and features" of
kernel config is my problem



what makes you think it's a processor type setting problem? i'd rather
guess it's some PaX bug/feature at this point in time ;-).






--
gentoo-hardened@lists.gentoo.org mailing list

No I don't change anymore. I only do next
disable "Hide kernel symbols" in Grsecurity and enable CALLSYMS, and
when I enable that, some settings

by enabled too, and i dont,t touch them

pageexec@freemail.hu пишет:

On 8 Feb 2008 at 17:36, wrote:


you must have changed something else as well, kernel symbols don't

affect code execution . check power management settings maybe,
they can affect CPU speed.




--
gentoo-hardened@lists.gentoo.org mailing list