Luca Berra kirjoitti viestiss��n (l�hetysaika Keskiviikko 22 Lokakuu 2003 21:16): > i don't think Wietse is subscribed to cooker :))) > > could someone from kernel team have a look at this? > > L.
I checked this even if I don't belong to the MDK kernel team... ;-) [...] > > Luca Berra: > > in gr_log_resource() we have > > > > if (unlikely(wanted >= task->rlim[res].rlim_cur && > > task->rlim[res].rlim_cur != RLIM_INFINITY)) > > security_alert(GR_RESOURCE_MSG, ........ > > > > using >= is IMHO wrong. > > Indeed. I recommend that this grsec bug is fixed, instead of changing > Postfix in order to work around grsec bugs. > > Wietse Yep. you are correct. it's fixed in the grsecurity cvs, and I will have it included in my next kernel... and hopefully Juan will pick it up also... -- Regards Thomas
