hi i tried to combine grsecurikty ( www.grsecurity.com ) and tomoyo. i've downloaded the newest patch ( http://sourceforge.jp/projects/tomoyo/downloads/30297/ccs-patch-1.6.5-20081225.tar.gz ) i also downloaded this patch http://www.grsecurity.net/grsecurity-2.1.12-2.6.27.10-200812271347.patch.gz and, of course, i downloaded kiernel 2.6.27.10 from kernel.org i unpacked it, i applied grsecurity patch without errors, but when i tried to apply css patch, i get: (i paste here everything what i get during patching- from the beginning till end) szymon at linugrat:~$ su Hasło: root at linugrat:/home/szymon# cd /usr/src/linux-2.6.27.10/ root at linugrat:/usr/src/linux-2.6.27.10# pwd /usr/src/linux-2.6.27.10 root at linugrat:/usr/src/linux-2.6.27.10# whoami root root at linugrat:/usr/src/linux-2.6.27.10# cp /usr/src/grsecurity-2.1.12-2.6.27.10- 200812271347.patch /usr/src/linux-2.6.27.10/ root at linugrat:/usr/src/linux-2.6.27.10# ls arch include README block init REPORTING-BUGS COPYING ipc samples CREDITS Kbuild scripts crypto kernel security Documentation lib sound drivers MAINTAINERS usr firmware Makefile virt fs mm grsecurity-2.1.12-2.6.27.10-200812271347.patch net root at linugrat:/usr/src/linux-2.6.27.10# patch -p1 </usr/src/linux-2.6.27.10/grse curity-2.1.12-2.6.27.10-200812271347.patch patching file arch/alpha/include/asm/elf.h patching file arch/alpha/include/asm/kmap_types.h patching file arch/alpha/include/asm/pgtable.h patching file arch/alpha/kernel/module.c patching file arch/alpha/kernel/osf_sys.c patching file arch/alpha/kernel/ptrace.c patching file arch/alpha/mm/fault.c patching file arch/arm/include/asm/elf.h patching file arch/arm/include/asm/kmap_types.h patching file arch/arm/mm/mmap.c patching file arch/avr32/include/asm/elf.h patching file arch/avr32/include/asm/kmap_types.h patching file arch/avr32/mm/fault.c patching file arch/blackfin/include/asm/kmap_types.h patching file arch/h8300/include/asm/kmap_types.h patching file arch/ia64/ia32/binfmt_elf32.c patching file arch/ia64/ia32/ia32priv.h patching file arch/ia64/include/asm/elf.h patching file arch/ia64/include/asm/kmap_types.h patching file arch/ia64/include/asm/pgtable.h patching file arch/ia64/kernel/module.c patching file arch/ia64/kernel/sys_ia64.c patching file arch/ia64/mm/fault.c patching file arch/ia64/mm/init.c patching file arch/m68knommu/include/asm/kmap_types.h patching file arch/mips/kernel/binfmt_elfn32.c patching file arch/mips/kernel/binfmt_elfo32.c patching file arch/mips/kernel/process.c patching file arch/mips/kernel/syscall.c patching file arch/mips/mm/fault.c patching file arch/parisc/kernel/module.c patching file arch/parisc/kernel/sys_parisc.c patching file arch/parisc/kernel/traps.c patching file arch/parisc/mm/fault.c patching file arch/powerpc/include/asm/elf.h patching file arch/powerpc/include/asm/kmap_types.h patching file arch/powerpc/include/asm/page_64.h patching file arch/powerpc/include/asm/page.h patching file arch/powerpc/kernel/module_32.c patching file arch/powerpc/kernel/signal_32.c patching file arch/powerpc/kernel/signal_64.c patching file arch/powerpc/kernel/vdso.c patching file arch/powerpc/mm/fault.c patching file arch/powerpc/mm/mmap.c patching file arch/s390/include/asm/kmap_types.h patching file arch/s390/kernel/module.c patching file arch/sh/include/asm/kmap_types.h patching file arch/sparc/include/asm/elf_32.h patching file arch/sparc/include/asm/elf_64.h patching file arch/sparc/include/asm/kmap_types.h patching file arch/sparc/include/asm/pgtable_32.h patching file arch/sparc/include/asm/pgtsrmmu.h patching file arch/sparc/kernel/sys_sparc.c patching file arch/sparc/Makefile patching file arch/sparc/mm/fault.c patching file arch/sparc/mm/init.c patching file arch/sparc/mm/srmmu.c patching file arch/sparc64/kernel/Makefile patching file arch/sparc64/kernel/sys_sparc.c patching file arch/sparc64/mm/fault.c patching file arch/sparc64/mm/Makefile patching file arch/um/sys-i386/syscalls.c patching file arch/x86/boot/bitops.h patching file arch/x86/boot/boot.h patching file arch/x86/boot/compressed/head_32.S patching file arch/x86/boot/compressed/misc.c patching file arch/x86/boot/compressed/relocs.c patching file arch/x86/boot/cpucheck.c patching file arch/x86/boot/edd.c patching file arch/x86/boot/main.c patching file arch/x86/boot/mca.c patching file arch/x86/boot/memory.c patching file arch/x86/boot/video.c patching file arch/x86/boot/video-vesa.c patching file arch/x86/boot/video-vga.c patching file arch/x86/boot/voyager.c patching file arch/x86/ia32/ia32_signal.c patching file arch/x86/Kconfig patching file arch/x86/Kconfig.cpu patching file arch/x86/Kconfig.debug patching file arch/x86/kernel/acpi/boot.c patching file arch/x86/kernel/acpi/realmode/wakeup.S patching file arch/x86/kernel/acpi/sleep.c patching file arch/x86/kernel/acpi/wakeup_32.S patching file arch/x86/kernel/alternative.c patching file arch/x86/kernel/apm_32.c patching file arch/x86/kernel/asm-offsets_32.c patching file arch/x86/kernel/asm-offsets_64.c patching file arch/x86/kernel/cpu/common_64.c patching file arch/x86/kernel/cpu/common.c patching file arch/x86/kernel/cpu/cpufreq/acpi-cpufreq.c patching file arch/x86/kernel/cpu/cpufreq/speedstep-centrino.c patching file arch/x86/kernel/cpu/intel.c patching file arch/x86/kernel/cpu/mcheck/mce_64.c patching file arch/x86/kernel/cpu/mtrr/generic.c patching file arch/x86/kernel/crash.c patching file arch/x86/kernel/doublefault_32.c patching file arch/x86/kernel/efi_32.c patching file arch/x86/kernel/efi_stub_32.S patching file arch/x86/kernel/entry_32.S patching file arch/x86/kernel/entry_64.S patching file arch/x86/kernel/ftrace.c patching file arch/x86/kernel/head32.c patching file arch/x86/kernel/head_32.S patching file arch/x86/kernel/head64.c patching file arch/x86/kernel/head_64.S patching file arch/x86/kernel/i386_ksyms_32.c patching file arch/x86/kernel/init_task.c patching file arch/x86/kernel/ioport.c patching file arch/x86/kernel/irq_32.c patching file arch/x86/kernel/kprobes.c patching file arch/x86/kernel/ldt.c patching file arch/x86/kernel/machine_kexec_32.c patching file arch/x86/kernel/module_32.c patching file arch/x86/kernel/module_64.c patching file arch/x86/kernel/paravirt.c patching file arch/x86/kernel/process_32.c patching file arch/x86/kernel/process_64.c patching file arch/x86/kernel/ptrace.c patching file arch/x86/kernel/reboot.c patching file arch/x86/kernel/setup.c patching file arch/x86/kernel/setup_percpu.c patching file arch/x86/kernel/signal_32.c patching file arch/x86/kernel/signal_64.c patching file arch/x86/kernel/smpboot.c patching file arch/x86/kernel/smpcommon.c patching file arch/x86/kernel/step.c patching file arch/x86/kernel/syscall_table_32.S patching file arch/x86/kernel/sys_i386_32.c patching file arch/x86/kernel/sys_x86_64.c patching file arch/x86/kernel/time_32.c patching file arch/x86/kernel/tlb_32.c patching file arch/x86/kernel/tls.c patching file arch/x86/kernel/traps_32.c patching file arch/x86/kernel/traps_64.c patching file arch/x86/kernel/tsc.c patching file arch/x86/kernel/vm86_32.c patching file arch/x86/kernel/vmi_32.c patching file arch/x86/kernel/vmlinux_32.lds.S patching file arch/x86/kernel/vmlinux_64.lds.S patching file arch/x86/kernel/vsyscall_64.c patching file arch/x86/kvm/svm.c patching file arch/x86/kvm/vmx.c patching file arch/x86/kvm/x86.c patching file arch/x86/lib/checksum_32.S patching file arch/x86/lib/clear_page_64.S patching file arch/x86/lib/copy_page_64.S patching file arch/x86/lib/copy_user_64.S patching file arch/x86/lib/getuser.S patching file arch/x86/lib/memcpy_64.S patching file arch/x86/lib/memset_64.S patching file arch/x86/lib/mmx_32.c patching file arch/x86/lib/putuser.S patching file arch/x86/lib/usercopy_32.c patching file arch/x86/mach-voyager/voyager_basic.c patching file arch/x86/mach-voyager/voyager_smp.c patching file arch/x86/Makefile patching file arch/x86/mm/discontig_32.c patching file arch/x86/mm/extable.c patching file arch/x86/mm/fault.c patching file arch/x86/mm/highmem_32.c patching file arch/x86/mm/hugetlbpage.c patching file arch/x86/mm/init_32.c patching file arch/x86/mm/init_64.c patching file arch/x86/mm/ioremap.c patching file arch/x86/mm/mmap.c patching file arch/x86/mm/pageattr.c patching file arch/x86/mm/pat.c patching file arch/x86/mm/pgtable_32.c patching file arch/x86/oprofile/backtrace.c patching file arch/x86/oprofile/op_model_p4.c patching file arch/x86/pci/common.c patching file arch/x86/pci/fixup.c patching file arch/x86/pci/irq.c patching file arch/x86/pci/pcbios.c patching file arch/x86/power/cpu_32.c patching file arch/x86/power/cpu_64.c patching file arch/x86/vdso/vdso32-setup.c patching file arch/x86/vdso/vma.c patching file arch/x86/xen/enlighten.c patching file arch/x86/xen/smp.c patching file crypto/async_tx/async_tx.c patching file crypto/lrw.c patching file Documentation/dontdiff patching file drivers/acpi/blacklist.c patching file drivers/acpi/osl.c patching file drivers/acpi/processor_core.c patching file drivers/acpi/processor_idle.c patching file drivers/acpi/tables/tbfadt.c patching file drivers/ata/ahci.c patching file drivers/ata/ata_piix.c patching file drivers/ata/libata-core.c patching file drivers/char/agp/frontend.c patching file drivers/char/agp/intel-agp.c patching file drivers/char/hpet.c patching file drivers/char/keyboard.c patching file drivers/char/mem.c patching file drivers/char/nvram.c patching file drivers/char/random.c patching file drivers/char/tpm/tpm.c patching file drivers/char/vt_ioctl.c patching file drivers/edac/edac_core.h patching file drivers/firmware/dmi_scan.c patching file drivers/hwmon/fscpos.c patching file drivers/hwmon/k8temp.c patching file drivers/hwmon/sis5595.c patching file drivers/hwmon/via686a.c patching file drivers/hwmon/vt8231.c patching file drivers/hwmon/w83791d.c patching file drivers/i2c/busses/i2c-i801.c patching file drivers/i2c/busses/i2c-piix4.c patching file drivers/i2c/busses/i2c-sis630.c patching file drivers/i2c/busses/i2c-sis96x.c patching file drivers/ieee1394/dv1394.c patching file drivers/ieee1394/eth1394.c patching file drivers/ieee1394/hosts.c patching file drivers/ieee1394/ohci1394.c patching file drivers/ieee1394/raw1394.c patching file drivers/ieee1394/sbp2.c patching file drivers/ieee1394/video1394.c patching file drivers/input/keyboard/atkbd.c patching file drivers/input/mouse/lifebook.c patching file drivers/input/mouse/psmouse-base.c patching file drivers/input/mouse/synaptics.c patching file drivers/input/mousedev.c patching file drivers/input/serio/i8042-x86ia64io.h patching file drivers/input/serio/serio_raw.c patching file drivers/md/bitmap.c patching file drivers/mtd/devices/doc2000.c patching file drivers/mtd/devices/doc2001.c patching file drivers/mtd/devices/slram.c patching file drivers/mtd/ubi/build.c patching file drivers/net/eepro100.c patching file drivers/net/irda/vlsi_ir.c patching file drivers/net/pcnet32.c patching file drivers/net/tg3.h patching file drivers/net/wireless/iwlwifi/iwl3945-base.c patching file drivers/pci/hotplug/cpqphp_nvram.c patching file drivers/pci/pcie/aer/aerdrv.c patching file drivers/pci/pcie/aer/aerdrv_core.c patching file drivers/pci/pcie/portdrv_pci.c patching file drivers/pci/proc.c patching file drivers/pcmcia/ti113x.h patching file drivers/pcmcia/yenta_socket.c patching file drivers/pnp/pnpbios/bioscalls.c patching file drivers/pnp/quirks.c patching file drivers/pnp/resource.c patching file drivers/scsi/scsi_logging.h patching file drivers/serial/8250_pci.c patching file drivers/usb/class/cdc-acm.c patching file drivers/usb/class/usblp.c patching file drivers/usb/core/hub.c patching file drivers/usb/host/ehci-pci.c patching file drivers/usb/host/uhci-hcd.c patching file drivers/usb/storage/debug.h patching file drivers/usb/storage/usb.c patching file drivers/video/fbcmap.c patching file drivers/video/fbmem.c patching file drivers/video/fbmon.c patching file drivers/video/i810/i810_accel.c patching file drivers/video/i810/i810_main.c patching file drivers/video/modedb.c patching file drivers/video/uvesafb.c patching file drivers/video/vesafb.c patching file fs/9p/vfs_inode.c patching file fs/aio.c patching file fs/autofs4/symlink.c patching file fs/befs/linuxvfs.c patching file fs/binfmt_aout.c patching file fs/binfmt_elf.c patching file fs/binfmt_flat.c patching file fs/binfmt_misc.c patching file fs/bio.c patching file fs/buffer.c patching file fs/cifs/cifs_uniupr.h patching file fs/cifs/link.c patching file fs/compat.c patching file fs/compat_ioctl.c patching file fs/debugfs/inode.c patching file fs/exec.c patching file fs/ext2/balloc.c patching file fs/ext3/balloc.c patching file fs/ext3/namei.c patching file fs/ext3/xattr.c patching file fs/ext4/balloc.c patching file fs/ext4/namei.c patching file fs/fcntl.c patching file fs/file.c patching file fs/fuse/control.c patching file fs/fuse/dir.c patching file fs/hfs/inode.c patching file fs/hfsplus/inode.c patching file fs/jffs2/debug.h patching file fs/jffs2/erase.c patching file fs/jffs2/summary.h patching file fs/jffs2/wbuf.c patching file fs/locks.c patching file fs/namei.c patching file fs/namespace.c patching file fs/nfs/nfs4proc.c patching file fs/nfsd/export.c patching file fs/nls/nls_base.c patching file fs/ntfs/file.c patching file fs/open.c patching file fs/pipe.c patching file fs/proc/array.c patching file fs/proc/base.c patching file fs/proc/inode.c patching file fs/proc/internal.h patching file fs/proc/Kconfig patching file fs/proc/proc_misc.c patching file fs/proc/proc_net.c patching file fs/proc/proc_sysctl.c patching file fs/proc/root.c patching file fs/proc/task_mmu.c patching file fs/readdir.c patching file fs/select.c patching file fs/smbfs/symlink.c patching file fs/sysfs/symlink.c patching file fs/udf/balloc.c patching file fs/ufs/inode.c patching file fs/utimes.c patching file fs/xfs/linux-2.6/xfs_iops.c patching file fs/xfs/xfs_bmap.c patching file grsecurity/gracl_alloc.c patching file grsecurity/gracl.c patching file grsecurity/gracl_cap.c patching file grsecurity/gracl_fs.c patching file grsecurity/gracl_ip.c patching file grsecurity/gracl_learn.c patching file grsecurity/gracl_res.c patching file grsecurity/gracl_segv.c patching file grsecurity/gracl_shm.c patching file grsecurity/grsec_chdir.c patching file grsecurity/grsec_chroot.c patching file grsecurity/grsec_disabled.c patching file grsecurity/grsec_exec.c patching file grsecurity/grsec_fifo.c patching file grsecurity/grsec_fork.c patching file grsecurity/grsec_init.c patching file grsecurity/grsec_ipc.c patching file grsecurity/grsec_link.c patching file grsecurity/grsec_log.c patching file grsecurity/grsec_mem.c patching file grsecurity/grsec_mount.c patching file grsecurity/grsec_sig.c patching file grsecurity/grsec_sock.c patching file grsecurity/grsec_sysctl.c patching file grsecurity/grsec_textrel.c patching file grsecurity/grsec_time.c patching file grsecurity/grsec_tpe.c patching file grsecurity/grsum.c patching file grsecurity/Kconfig patching file grsecurity/Makefile patching file include/asm-cris/kmap_types.h patching file include/asm-frv/kmap_types.h patching file include/asm-generic/futex.h patching file include/asm-generic/vmlinux.lds.h patching file include/asm-m32r/kmap_types.h patching file include/asm-m68k/kmap_types.h patching file include/asm-mips/elf.h patching file include/asm-mips/kmap_types.h patching file include/asm-mips/page.h patching file include/asm-mips/system.h patching file include/asm-mn10300/kmap_types.h patching file include/asm-parisc/elf.h patching file include/asm-parisc/kmap_types.h patching file include/asm-parisc/pgtable.h patching file include/asm-um/kmap_types.h patching file include/asm-um/page.h patching file include/asm-x86/alternative.h patching file include/asm-x86/atomic_32.h patching file include/asm-x86/atomic_64.h patching file include/asm-x86/boot.h patching file include/asm-x86/cache.h patching file include/asm-x86/checksum_32.h patching file include/asm-x86/desc.h patching file include/asm-x86/e820.h patching file include/asm-x86/elf.h patching file include/asm-x86/futex.h patching file include/asm-x86/i387.h patching file include/asm-x86/io_64.h patching file include/asm-x86/irqflags.h patching file include/asm-x86/kmap_types.h patching file include/asm-x86/linkage.h patching file include/asm-x86/local.h patching file include/asm-x86/mach-default/apm.h patching file include/asm-x86/mman.h patching file include/asm-x86/mmu_context_32.h patching file include/asm-x86/mmu.h patching file include/asm-x86/module.h patching file include/asm-x86/page_32.h patching file include/asm-x86/page_64.h patching file include/asm-x86/paravirt.h patching file include/asm-x86/pda.h patching file include/asm-x86/percpu.h patching file include/asm-x86/pgalloc.h patching file include/asm-x86/pgtable-2level.h patching file include/asm-x86/pgtable_32.h patching file include/asm-x86/pgtable-3level.h patching file include/asm-x86/pgtable_64.h patching file include/asm-x86/pgtable.h patching file include/asm-x86/processor.h patching file include/asm-x86/ptrace.h patching file include/asm-x86/reboot.h patching file include/asm-x86/rwsem.h patching file include/asm-x86/segment.h patching file include/asm-x86/spinlock.h patching file include/asm-x86/system.h patching file include/asm-x86/uaccess_64.h patching file include/asm-x86/uaccess.h patching file include/asm-xtensa/kmap_types.h patching file include/drm/drm_pciids.h patching file include/linux/a.out.h patching file include/linux/binfmts.h patching file include/linux/cache.h patching file include/linux/capability.h patching file include/linux/cpumask.h patching file include/linux/elf.h patching file include/linux/gracl.h patching file include/linux/gralloc.h patching file include/linux/grdefs.h patching file include/linux/grinternal.h patching file include/linux/grmsg.h patching file include/linux/grsecurity.h patching file include/linux/highmem.h patching file include/linux/jbd2.h patching file include/linux/jbd.h patching file include/linux/libata.h patching file include/linux/mm.h patching file include/linux/mm_types.h patching file include/linux/module.h patching file include/linux/moduleloader.h patching file include/linux/namei.h patching file include/linux/nodemask.h patching file include/linux/percpu.h patching file include/linux/poison.h patching file include/linux/random.h patching file include/linux/sched.h patching file include/linux/screen_info.h patching file include/linux/shm.h patching file include/linux/slab.h patching file include/linux/sysctl.h patching file include/linux/thread_info.h patching file include/linux/uaccess.h patching file include/linux/vmalloc.h patching file include/net/sctp/sctp.h patching file include/sound/core.h patching file include/video/uvesafb.h patching file init/do_mounts.c patching file init/do_mounts.h patching file init/do_mounts_initrd.c patching file init/do_mounts_md.c patching file init/initramfs.c patching file init/Kconfig patching file init/main.c patching file init/noinitramfs.c patching file ipc/ipc_sysctl.c patching file ipc/msg.c patching file ipc/sem.c patching file ipc/shm.c patching file kernel/acct.c patching file kernel/capability.c patching file kernel/configs.c patching file kernel/cpu.c patching file kernel/exit.c patching file kernel/fork.c patching file kernel/futex.c patching file kernel/irq/handle.c patching file kernel/kallsyms.c patching file kernel/kmod.c patching file kernel/kprobes.c patching file kernel/lockdep.c patching file kernel/module.c patching file kernel/mutex.c patching file kernel/panic.c patching file kernel/pid.c patching file kernel/posix-cpu-timers.c patching file kernel/power/poweroff.c patching file kernel/printk.c patching file kernel/ptrace.c patching file kernel/relay.c patching file kernel/resource.c patching file kernel/sched.c patching file kernel/signal.c patching file kernel/softirq.c patching file kernel/sys.c patching file kernel/sysctl.c patching file kernel/time/tick-broadcast.c patching file kernel/time.c patching file kernel/utsname_sysctl.c patching file lib/radix-tree.c patching file localversion-grsec patching file Makefile patching file mm/filemap.c patching file mm/fremap.c patching file mm/hugetlb.c patching file mm/madvise.c patching file mm/memory.c patching file mm/mempolicy.c patching file mm/mlock.c patching file mm/mmap.c patching file mm/mprotect.c patching file mm/mremap.c patching file mm/nommu.c patching file mm/page_alloc.c patching file mm/rmap.c patching file mm/shmem.c patching file mm/slab.c patching file mm/tiny-shmem.c patching file mm/util.c patching file mm/vmalloc.c patching file net/bridge/br_stp_if.c patching file net/core/flow.c patching file net/dccp/ccids/ccid3.c patching file net/dccp/dccp.h patching file net/ipv4/inet_connection_sock.c patching file net/ipv4/inet_hashtables.c patching file net/ipv4/netfilter/ipt_stealth.c patching file net/ipv4/netfilter/Kconfig patching file net/ipv4/netfilter/Makefile patching file net/ipv4/tcp_ipv4.c patching file net/ipv4/udp.c patching file net/ipv6/exthdrs.c patching file net/ipv6/raw.c patching file net/irda/ircomm/ircomm_tty.c patching file net/sctp/socket.c patching file net/socket.c patching file net/unix/af_unix.c patching file scripts/pnmtologo.c patching file security/commoncap.c patching file security/Kconfig patching file sound/core/oss/pcm_oss.c patching file sound/core/seq/seq_lock.h patching file sound/pci/ac97/ac97_patch.c patching file sound/pci/ens1370.c patching file sound/pci/intel8x0.c patching file sound/pci/intel8x0m.c patching file virt/kvm/kvm_main.c root at linugrat:/usr/src/linux-2.6.27.10# cp /usr/src/ccs-patch-1.6.5-20081225 ccs-patch-1.6.5-20081225/ ccs-patch-1.6.5-20081225.tar root at linugrat:/usr/src/linux-2.6.27.10# cp /usr/src/ccs-patch-1.6.5-20081225 ccs-patch-1.6.5-20081225/ ccs-patch-1.6.5-20081225.tar root at linugrat:/usr/src/linux-2.6.27.10# cp /usr/src/ccs-patch-1.6.5-20081225.tar /usr/src/linux-2.6.27.10/ root at linugrat:/usr/src/linux-2.6.27.10# ls arch kernel block lib ccs-patch-1.6.5-20081225.tar localversion-grsec COPYING MAINTAINERS CREDITS Makefile crypto mm Documentation net drivers README firmware REPORTING-BUGS fs samples grsecurity scripts grsecurity-2.1.12-2.6.27.10-200812271347.patch security include sound init usr ipc virt Kbuild root at linugrat:/usr/src/linux-2.6.27.10# tar xvvf ccs-patch-1.6.5-20081225.tar -rw-r--r-- root/root 17987 2008-12-25 00:00 COPYING.ccs -rw-r--r-- root/root 63504 2008-12-25 00:00 README.ccs -rw-r--r-- root/root 152 2008-12-25 00:00 config.ccs drwxr-xr-x root/root 0 2008-12-25 00:00 fs/ drwxr-xr-x root/root 0 2008-12-25 00:00 fs/proc/ -rw-r--r-- root/root 6651 2008-12-25 00:00 fs/proc/ccs_proc.c -rw-r--r-- root/root 25111 2008-12-25 00:00 fs/tomoyo_network.c -rw-r--r-- root/root 8033 2008-12-25 00:00 fs/tomoyo_env.c -rw-r--r-- root/root 1254 2008-12-25 00:00 fs/Config.ccs.in -rw-r--r-- root/root 17083 2008-12-25 00:00 fs/realpath.c -rw-r--r-- root/root 4314 2008-12-25 00:00 fs/sakura_maymount.c -rw-r--r-- root/root 10194 2008-12-25 00:00 fs/syaoran_2.6.c -rw-r--r-- root/root 4944 2008-12-25 00:00 fs/sakura_chroot.c -rw-r--r-- root/root 445 2008-12-25 00:00 fs/Makefile-2.4.ccs -rw-r--r-- root/root 403 2008-12-25 00:00 fs/Makefile-2.6.ccs -rw-r--r-- root/root 3915 2008-12-25 00:00 fs/Kconfig.ccs -rw-r--r-- root/root 5953 2008-12-25 00:00 fs/sakura_pivot.c -rw-r--r-- root/root 17444 2008-12-25 00:00 fs/sakura_mount.c -rw-r--r-- root/root 10102 2008-12-25 00:00 fs/tomoyo_audit.c -rw-r--r-- root/root 10607 2008-12-25 00:00 fs/syaoran.c -rw-r--r-- root/root 46755 2008-12-25 00:00 fs/tomoyo_domain.c -rw-r--r-- root/root 3961 2008-12-25 00:00 fs/sakura_bind.c -rw-r--r-- root/root 86369 2008-12-25 00:00 fs/ccs_common.c -rw-r--r-- root/root 6942 2008-12-25 00:00 fs/tomoyo_capability.c -rw-r--r-- root/root 6433 2008-12-25 00:00 fs/tomoyo_signal.c -rw-r--r-- root/root 43392 2008-12-25 00:00 fs/tomoyo_file.c -rw-r--r-- root/root 32725 2008-12-25 00:00 fs/tomoyo_cond.c -rw-r--r-- root/root 5733 2008-12-25 00:00 fs/tomoyo_exec.c -rw-r--r-- root/root 4149 2008-12-25 00:00 fs/sakura_umount.c drwxr-xr-x root/root 0 2008-12-25 00:00 include/ drwxr-xr-x root/root 0 2008-12-25 00:00 include/linux/ -rw-r--r-- root/root 11231 2008-12-25 00:00 include/linux/tomoyo_socket.h -rw-r--r-- root/root 955 2008-12-25 00:00 include/linux/ccs_proc.h -rw-r--r-- root/root 30648 2008-12-25 00:00 include/linux/syaoran.h -rw-r--r-- root/root 32792 2008-12-25 00:00 include/linux/ccs_common.h -rw-r--r-- root/root 1849 2008-12-25 00:00 include/linux/realpath.h -rw-r--r-- root/root 11560 2008-12-25 00:00 include/linux/tomoyo_vfs.h -rw-r--r-- root/root 3211 2008-12-25 00:00 include/linux/sakura.h -rw-r--r-- root/root 10452 2008-12-25 00:00 include/linux/tomoyo.h drwxr-xr-x root/root 0 2008-12-25 00:00 patches/ -rw-r--r-- root/root 58412 2008-12-25 00:00 patches/ccs-patch-2.4.27-debian- sarge.diff -rw-r--r-- root/root 48397 2008-12-25 00:00 patches/ccs-patch-2.6.24-gentoo- r7.diff -rw-r--r-- root/root 58267 2008-12-25 00:00 patches/ccs-patch-2.4.20-redhat- linux-9.diff -rw-r--r-- root/root 50897 2008-12-25 00:00 patches/ccs-patch-2.6.18-natures -linux-1.6.diff -rw-r--r-- root/root 62443 2008-12-25 00:00 patches/ccs-patch-2.6.12-fedora- core-3.diff -rw-r--r-- root/root 50239 2008-12-25 00:00 patches/ccs-patch-2.6.20-fedora- core-5.diff -rw-r--r-- root/root 61146 2008-12-25 00:00 patches/ccs-patch-2.6.9-centos-4 .7.diff -rw-r--r-- root/root 51319 2008-12-25 00:00 patches/ccs-patch-2.6.17-fedora- core-4.diff -rw-r--r-- root/root 49005 2008-12-25 00:00 patches/ccs-patch-2.6.23-turboli nux-11.diff -rw-r--r-- root/root 60425 2008-12-25 00:00 patches/ccs-patch-2.6.9-asianux- 2.diff -rw-r--r-- root/root 49746 2008-12-25 00:00 patches/ccs-patch-2.6.22-suse-10 .3.diff -rw-r--r-- root/root 50759 2008-12-25 00:00 patches/ccs-patch-2.6.16-suse-10 .1.diff -rw-r--r-- root/root 58091 2008-12-25 00:00 patches/ccs-patch-2.4.31.diff -rw-r--r-- root/root 61174 2008-12-25 00:00 patches/ccs-patch-2.6.11.diff -rw-r--r-- root/root 48822 2008-12-25 00:00 patches/ccs-patch-2.6.21.diff -rw-r--r-- root/root 63523 2008-12-25 00:00 patches/ccs-patch-2.6.13.diff -rw-r--r-- root/root 51106 2008-12-25 00:00 patches/ccs-patch-2.6.16-vine-li nux-4.2.diff -rw-r--r-- root/root 43737 2008-12-25 00:00 patches/ccs-patch-2.6.27-suse-11 .1.diff -rw-r--r-- root/root 57800 2008-12-25 00:00 patches/ccs-patch-2.4.33.diff -rw-r--r-- root/root 49167 2008-12-25 00:00 patches/ccs-patch-2.6.23.diff -rw-r--r-- root/root 50145 2008-12-25 00:00 patches/ccs-patch-2.6.15.diff -rw-r--r-- root/root 57801 2008-12-25 00:00 patches/ccs-patch-2.4.35.diff -rw-r--r-- root/root 49662 2008-12-25 00:00 patches/ccs-patch-2.6.22-ubuntu- 7.10.diff -rw-r--r-- root/root 44720 2008-12-25 00:00 patches/ccs-patch-2.6.25.diff -rw-r--r-- root/root 50652 2008-12-25 00:00 patches/ccs-patch-2.6.17.diff -rw-r--r-- root/root 57481 2008-12-25 00:00 patches/ccs-patch-2.4.21-centos- 3.9.diff -rw-r--r-- root/root 57605 2008-12-25 00:00 patches/ccs-patch-2.4.37.diff -rw-r--r-- root/root 49754 2008-12-25 00:00 patches/ccs-patch-2.6.20-ubuntu- 7.04.diff -rw-r--r-- root/root 43387 2008-12-25 00:00 patches/ccs-patch-2.6.27.diff -rw-r--r-- root/root 51231 2008-12-25 00:00 patches/ccs-patch-2.6.18-debian- etch.diff -rw-r--r-- root/root 64679 2008-12-25 00:00 patches/ccs-patch-2.4.31-armadil lo-9.diff -rw-r--r-- root/root 49906 2008-12-25 00:00 patches/ccs-patch-2.6.19.diff -rw-r--r-- root/root 43867 2008-12-25 00:00 patches/ccs-patch-2.6.26-fedora- 8.diff -rw-r--r-- root/root 48309 2008-12-25 00:00 patches/ccs-patch-2.6.24-ubuntu- 8.04.diff -rw-r--r-- root/root 48069 2008-12-25 00:00 patches/ccs-patch-2.6.18-asianux -3.diff -rw-r--r-- root/root 43959 2008-12-25 00:00 patches/ccs-patch-2.6.27-fedora- 10.diff -rw-r--r-- root/root 49728 2008-12-25 00:00 patches/ccs-patch-2.6.23-gentoo- r9.diff -rw-r--r-- root/root 46615 2008-12-25 00:00 patches/ccs-patch-2.6.22-fedora- core-6.diff -rw-r--r-- root/root 58091 2008-12-25 00:00 patches/ccs-patch-2.4.30.diff -rw-r--r-- root/root 57772 2008-12-25 00:00 patches/ccs-patch-2.4.32.diff -rw-r--r-- root/root 45329 2008-12-25 00:00 patches/ccs-patch-2.6.25-suse-11 .0.diff -rw-r--r-- root/root 49534 2008-12-25 00:00 patches/ccs-patch-2.6.20.diff -rw-r--r-- root/root 57800 2008-12-25 00:00 patches/ccs-patch-2.4.34.diff -rw-r--r-- root/root 61433 2008-12-25 00:00 patches/ccs-patch-2.6.12.diff -rw-r--r-- root/root 51204 2008-12-25 00:00 patches/ccs-patch-2.6.18-suse-10 .2.diff -rw-r--r-- root/root 47840 2008-12-25 00:00 patches/ccs-patch-2.6.18-centos- 5.2.diff -rw-r--r-- root/root 49301 2008-12-25 00:00 patches/ccs-patch-2.6.22.diff -rw-r--r-- root/root 63723 2008-12-25 00:00 patches/ccs-patch-2.6.14.diff -rw-r--r-- root/root 57803 2008-12-25 00:00 patches/ccs-patch-2.4.36.diff -rw-r--r-- root/root 47779 2008-12-25 00:00 patches/ccs-patch-2.6.24.diff -rw-r--r-- root/root 50123 2008-12-25 00:00 patches/ccs-patch-2.6.16.diff -rw-r--r-- root/root 50754 2008-12-25 00:00 patches/ccs-patch-2.6.18.diff -rw-r--r-- root/root 46494 2008-12-25 00:00 patches/ccs-patch-2.6.23-fedora- 7.diff -rw-r--r-- root/root 58957 2008-12-25 00:00 patches/ccs-patch-2.6.8-debian-s arge.diff -rw-r--r-- root/root 43368 2008-12-25 00:00 patches/ccs-patch-2.6.26.diff -rw-r--r-- root/root 40952 2008-12-25 00:00 patches/ccs-patch-2.6.28.diff -rw-r--r-- root/root 51266 2008-12-25 00:00 patches/ccs-patch-2.6.17-ubuntu- 6.10.diff -rw-r--r-- root/root 61802 2008-12-25 00:00 patches/ccs-patch-2.6.12-armadil lo-9.diff -rw-r--r-- root/root 43405 2008-12-25 00:00 patches/ccs-patch-2.6.26-debian- lenny.diff -rw-r--r-- root/root 50475 2008-12-25 00:00 patches/ccs-patch-2.6.15-ubuntu- 6.06.diff -rw-r--r-- root/root 43816 2008-12-25 00:00 patches/ccs-patch-2.6.27-fedora- 9.diff -rw-r--r-- root/root 43707 2008-12-25 00:00 patches/ccs-patch-2.6.27-ubuntu- 8.10.diff -rw-r--r-- root/root 58302 2008-12-25 00:00 patches/ccs-patch-2.6.8-turbolin ux-10.diff drwxr-xr-x root/root 0 2008-12-25 00:00 specs/ -rwxr-xr-x root/root 2055 2008-12-25 00:00 specs/build-debian_sarge-2.6.8.s h -rwxr-xr-x root/root 3518 2008-12-25 00:00 specs/build-suse10.2-2.6.18.sh -rwxr-xr-x root/root 3524 2008-12-25 00:00 specs/build-suse11.1-2.6.27.sh -rwxr-xr-x root/root 1756 2008-12-25 00:00 specs/build-debian_lenny.sh -rwxr-xr-x root/root 3328 2008-12-25 00:00 specs/build-f10-2.6.27.sh -rwxr-xr-x root/root 2490 2008-12-25 00:00 specs/build-c4-2.6.9.sh -rwxr-xr-x root/root 1615 2008-12-25 00:00 specs/build-debian_etch.sh -rwxr-xr-x root/root 2424 2008-12-25 00:00 specs/build-ax3-2.6.18.sh -rwxr-xr-x root/root 2933 2008-12-25 00:00 specs/build-ubuntu_6.10.sh -rwxr-xr-x root/root 2359 2008-12-25 00:00 specs/build-vl4.2-2.6.16.sh -rwxr-xr-x root/root 2314 2008-12-25 00:00 specs/build-c3-2.4.21.sh -rwxr-xr-x root/root 4833 2008-12-25 00:00 specs/build-ubuntu_7.10.sh -rwxr-xr-x root/root 2782 2008-12-25 00:00 specs/build-ubuntu_8.10.sh -rwxr-xr-x root/root 3135 2008-12-25 00:00 specs/build-ubuntu_7.04.sh -rwxr-xr-x root/root 3204 2008-12-25 00:00 specs/build-ubuntu_6.06.sh -rwxr-xr-x root/root 2065 2008-12-25 00:00 specs/build-debian_sarge-2.4.27. sh -rwxr-xr-x root/root 4814 2008-12-25 00:00 specs/build-ubuntu_8.04.sh -rwxr-xr-x root/root 3716 2008-12-25 00:00 specs/build-suse10.3-2.6.22.sh -rwxr-xr-x root/root 2605 2008-12-25 00:00 specs/build-fc3-2.6.12.sh -rwxr-xr-x root/root 2561 2008-12-25 00:00 specs/build-rhl9-2.4.20.sh -rwxr-xr-x root/root 2591 2008-12-25 00:00 specs/build-fc5-2.6.20.sh -rwxr-xr-x root/root 2411 2008-12-25 00:00 specs/build-c5-2.6.18.sh -rwxr-xr-x root/root 2681 2008-12-25 00:00 specs/build-f7-2.6.23.sh -rwxr-xr-x root/root 2973 2008-12-25 00:00 specs/build-fc6-2.6.22.sh -rwxr-xr-x root/root 2517 2008-12-25 00:00 specs/build-ax2-2.6.9.sh -rwxr-xr-x root/root 2577 2008-12-25 00:00 specs/build-fc4-2.6.17.sh -rwxr-xr-x root/root 2863 2008-12-25 00:00 specs/build-f8-2.6.26.sh -rwxr-xr-x root/root 3321 2008-12-25 00:00 specs/build-f9-2.6.27.sh -rwxr-xr-x root/root 4134 2008-12-25 00:00 specs/build-suse10.1-2.6.16.sh -rwxr-xr-x root/root 3432 2008-12-25 00:00 specs/build-suse11.0-2.6.25.sh root at linugrat:/usr/src/linux-2.6.27.10# ls arch kernel block lib ccs-patch-1.6.5-20081225.tar localversion-grsec config.ccs MAINTAINERS COPYING Makefile COPYING.ccs mm CREDITS net crypto patches Documentation README drivers README.ccs firmware REPORTING-BUGS fs samples grsecurity scripts grsecurity-2.1.12-2.6.27.10-200812271347.patch security include sound init specs ipc usr Kbuild virt root at linugrat:/usr/src/linux-2.6.27.10# cp /usr/src/linux-2.6.27.10/patches/ccs- patch-2.6.27.diff /usr/src/linux-2.6.27.10/ root at linugrat:/usr/src/linux-2.6.27.10# ls arch kernel block lib ccs-patch-1.6.5-20081225.tar localversion-grsec ccs-patch-2.6.27.diff MAINTAINERS config.ccs Makefile COPYING mm COPYING.ccs net CREDITS patches crypto README Documentation README.ccs drivers REPORTING-BUGS firmware samples fs scripts grsecurity security grsecurity-2.1.12-2.6.27.10-200812271347.patch sound include specs init usr ipc virt Kbuild root at linugrat:/usr/src/linux-2.6.27.10# patch -p1 </usr/src/linux-2.6.27.10/ccs-patch-2.6.27.diff patching file arch/ia64/ia32/sys_ia32.c patching file arch/mips/kernel/ptrace32.c patching file fs/Kconfig patching file fs/Makefile patching file fs/attr.c patching file fs/compat.c Hunk #1 succeeded at 57 (offset 1 line). Hunk #2 succeeded at 1443 with fuzz 2 (offset 36 lines). patching file fs/compat_ioctl.c patching file fs/exec.c Hunk #1 succeeded at 76 with fuzz 1 (offset 12 lines). Hunk #2 succeeded at 148 (offset 12 lines). Hunk #3 succeeded at 724 (offset 29 lines). Hunk #4 succeeded at 1438 with fuzz 2 (offset 74 lines). patching file fs/fcntl.c Hunk #1 succeeded at 25 (offset 1 line). Hunk #2 succeeded at 159 (offset 1 line). patching file fs/ioctl.c patching file fs/namei.c Hunk #1 succeeded at 37 (offset 2 lines). Hunk #2 succeeded at 1535 (offset 16 lines). Hunk #3 succeeded at 1597 (offset 16 lines). Hunk #4 succeeded at 1668 (offset 24 lines). Hunk #5 succeeded at 2053 (offset 56 lines). Hunk #6 succeeded at 2123 (offset 68 lines). Hunk #7 succeeded at 2221 with fuzz 1 (offset 76 lines). Hunk #8 succeeded at 2354 with fuzz 1 (offset 95 lines). Hunk #9 FAILED at 2422. Hunk #10 succeeded at 2462 with fuzz 2 (offset 110 lines). Hunk #11 succeeded at 2535 (offset 112 lines). Hunk #12 succeeded at 2561 with fuzz 2 (offset 117 lines). Hunk #13 succeeded at 2647 (offset 119 lines). Hunk #14 succeeded at 2685 with fuzz 2 (offset 133 lines). Hunk #15 succeeded at 2874 (offset 137 lines). Hunk #16 succeeded at 2930 with fuzz 2 (offset 137 lines). 1 out of 16 hunks FAILED -- saving rejects to file fs/namei.c.rej patching file fs/namespace.c Hunk #1 succeeded at 32 (offset 1 line). Hunk #2 succeeded at 1048 (offset 1 line). Hunk #3 succeeded at 1149 (offset 6 lines). Hunk #4 succeeded at 1500 (offset 6 lines). Hunk #5 succeeded at 1624 (offset 6 lines). Hunk #6 succeeded at 1733 (offset 6 lines). Hunk #7 succeeded at 1961 (offset 6 lines). Hunk #8 succeeded at 2247 (offset 17 lines). Hunk #9 succeeded at 2264 (offset 17 lines). patching file fs/open.c Hunk #1 FAILED at 29. Hunk #2 succeeded at 281 (offset 4 lines). Hunk #3 succeeded at 342 (offset 4 lines). Hunk #4 succeeded at 599 with fuzz 2 (offset 12 lines). Hunk #5 succeeded at 1220 (offset 56 lines). 1 out of 5 hunks FAILED -- saving rejects to file fs/open.c.rej patching file fs/proc/Makefile patching file fs/proc/proc_misc.c Hunk #1 succeeded at 951 (offset 17 lines). patching file include/linux/init_task.h patching file include/linux/sched.h Hunk #2 succeeded at 1041 with fuzz 2 (offset -271 lines). patching file kernel/compat.c patching file kernel/kexec.c patching file kernel/kmod.c patching file kernel/module.c Hunk #1 succeeded at 51 with fuzz 1 (offset 5 lines). Hunk #2 succeeded at 744 (offset 17 lines). Hunk #3 succeeded at 2427 (offset 152 lines). patching file kernel/ptrace.c Hunk #1 succeeded at 25 (offset 1 line). Hunk #2 succeeded at 557 (offset 1 line). Hunk #3 succeeded at 691 (offset 6 lines). patching file kernel/sched.c Hunk #1 succeeded at 75 (offset 1 line). Hunk #2 succeeded at 4949 (offset 1 line). patching file kernel/signal.c Hunk #1 succeeded at 34 (offset 1 line). Hunk #2 succeeded at 2215 (offset 10 lines). Hunk #3 succeeded at 2282 (offset 10 lines). Hunk #4 succeeded at 2301 (offset 10 lines). patching file kernel/sys.c Hunk #1 succeeded at 43 (offset 1 line). Hunk #2 succeeded at 156 (offset 7 lines). Hunk #3 succeeded at 378 (offset 7 lines). Hunk #4 succeeded at 1412 (offset 51 lines). Hunk #5 succeeded at 1461 (offset 51 lines). patching file kernel/sysctl.c Hunk #2 succeeded at 1636 (offset 46 lines). Hunk #3 succeeded at 1739 (offset 46 lines). patching file kernel/time.c Hunk #1 succeeded at 41 (offset 1 line). Hunk #2 succeeded at 94 with fuzz 1 (offset 1 line). Hunk #3 succeeded at 172 (offset 4 lines). patching file kernel/time/ntp.c patching file net/core/datagram.c patching file net/ipv4/inet_connection_sock.c Hunk #1 succeeded at 24 (offset 1 line). Hunk #2 succeeded at 110 (offset 1 line). patching file net/ipv4/inet_hashtables.c Hunk #1 succeeded at 23 with fuzz 2 (offset 1 line). Hunk #2 succeeded at 446 (offset 3 lines). patching file net/ipv4/udp.c Hunk #1 succeeded at 104 with fuzz 2 (offset 1 line). Hunk #2 succeeded at 179 (offset 6 lines). Hunk #3 succeeded at 206 (offset 6 lines). patching file net/socket.c Hunk #1 succeeded at 113 with fuzz 2 (offset 16 lines). Hunk #2 succeeded at 581 (offset 16 lines). Hunk #3 succeeded at 1150 (offset 16 lines). Hunk #4 succeeded at 1427 (offset 32 lines). Hunk #5 succeeded at 1470 with fuzz 1 (offset 39 lines). Hunk #6 succeeded at 1552 (offset 47 lines). Hunk #7 succeeded at 1682 with fuzz 2 (offset 49 lines). patching file net/unix/af_unix.c Hunk #1 FAILED at 114. Hunk #2 succeeded at 798 (offset 14 lines). Hunk #3 FAILED at 849. 2 out of 3 hunks FAILED -- saving rejects to file net/unix/af_unix.c.rej root at linugrat:/usr/src/linux-2.6.27.10# everything workis fine without grsecurity :/. is it possible to combine them together? both of them have got some really nice features best regards szymon