Subject: Re: [vserver] Patch for 2.6.38.4 vserver + GR Security
From: "Rik Bobbaers" <rik@enzoverder.be>
Date: Thu, 12 May 2011 12:34:52 +0200 (CEST)

this is the refcount overflow i was talking about.

I'll try to spin a new kernel this evening...

(ps. what system calls are you talking about? i haven't done any 2.6.38
kernel yet, so it would be nice to know and not have to look ;)

KR

Rik Bobbaers

-- http://harry.enzoverder.be

> I checked all the rejects and applied them manually. I had to merge a
> couple of function calls manually either because both vserver and grsec
> patches modified the same line.
>
> The kernel compiles and boots without crashing but I have found some
> functionality missing like the old token bucket sched, having to remove
> the sched directory from /etc/vservers/myvserver/sched
>
> Running the cherokee webserver inside a vserver with ~40 requests per
> second makes the kernel crash but I haven't had the time to try to
> reproduce the crash. The same webserver running inside a simple chroot
> does not crash the kernel.