Community Packages

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#47920 - [linux-grsec] Incompatibility with tlp (denied write to CPU MSR)

Attached to Project: Community Packages
Opened by Bastien Traverse (Neitsab) - Wednesday, 27 January 2016, 22:45 GMT
Last edited by Daniel Micay (thestinger) - Thursday, 28 January 2016, 09:41 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Daniel Micay (thestinger)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

Upon system boot two (same except PID) tlp-related errors arise:

22:39:53 kernel: grsec: denied write to CPU MSR by /usr/bin/x86_energy_perf_policy[x86_energy_perf:546] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/tlp[tlp:469] uid/euid:0/0 gid/egid:0/0
22:39:59 kernel: grsec: denied write to CPU MSR by /usr/bin/x86_energy_perf_policy[x86_energy_perf:768] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/tlp[tlp:736] uid/euid:0/0 gid/egid:0/0

[1] states it is an expected result of GRKERNSEC_KMEM activation, but since it doesn't appear in grsecurity compatibility list on the wiki [2] I thought I'd bring it up here.

I'll update the wiki if needed.

[1] https://forums.grsecurity.net/viewtopic.php?f=3&t=4310
[2] https://wiki.archlinux.org/index.php/Grsecurity#Compatibility

Additional info:
* package version(s): linux-grsec 4.3.4.201601261954-1, tlp 0.8-1
* config and/or log files etc.
Default

Steps to reproduce:
- install linux-grsec and tlp, set up both and restart
This task depends upon

Closed by  Daniel Micay (thestinger)
Thursday, 28 January 2016, 09:41 GMT
Reason for closing:  Not a bug
Additional comments about closing:  Added these to the compatibility list on the wiki. The sacrifices from enabling KMEM are intended: the official package is tuned for security rather than compatibility or performance.

Loading...