oops 2.6.24.2 + grsecurity-2.1.11-2.6.24.2-200802192340

Discuss and suggest new grsecurity features

oops 2.6.24.2 + grsecurity-2.1.11-2.6.24.2-200802192340

Postby stanojr » Fri Feb 22, 2008 9:39 am

it is debian x86_64, kernel build with make-kpkg --initrd kernel_image and .config is from older debian kernel, with little modifications
here is photo from oops after boot
http://blackhole.sk/~stanojr/DSC00566.JPG
stanojr
 
Posts: 6
Joined: Thu Apr 12, 2007 2:13 pm

Re: oops 2.6.24.2 + grsecurity-2.1.11-2.6.24.2-200802192340

Postby spender » Fri Feb 22, 2008 11:17 am

The PaX team is at a conference for a few days. They'll take a look at the bug when they get back.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Re: oops 2.6.24.2 + grsecurity-2.1.11-2.6.24.2-200802192340

Postby PaX Team » Sat Feb 23, 2008 2:16 pm

stanojr wrote:it is debian x86_64, kernel build with make-kpkg --initrd kernel_image and .config is from older debian kernel, with little modifications
here is photo from oops after boot
http://blackhole.sk/~stanojr/DSC00566.JPG
can you boot into a higher resolution mode (vga=ext or even better, some framebuffer mode using vesafb) and send me such a screenshot? also i'd need the corresponding System.map and vmlinux files.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: oops 2.6.24.2 + grsecurity-2.1.11-2.6.24.2-200802192340

Postby stanojr » Sat Mar 01, 2008 9:52 am

PaX Team wrote:
stanojr wrote:it is debian x86_64, kernel build with make-kpkg --initrd kernel_image and .config is from older debian kernel, with little modifications
here is photo from oops after boot
http://blackhole.sk/~stanojr/DSC00566.JPG
can you boot into a higher resolution mode (vga=ext or even better, some framebuffer mode using vesafb) and send me such a screenshot? also i'd need the corresponding System.map and vmlinux files.


so here it is
http://blackhole.sk/~stanojr/grsec/
stanojr
 
Posts: 6
Joined: Thu Apr 12, 2007 2:13 pm

Re: oops 2.6.24.2 + grsecurity-2.1.11-2.6.24.2-200802192340

Postby PaX Team » Sun Mar 02, 2008 5:24 am

stanojr wrote:so here it is http://blackhole.sk/~stanojr/grsec/
thanks, can you try test33? if it still fails, i'll also need your arch/x86/boot/compressed/vmlinux.bin and probably you'll have to patch in a small printk or two to figure out why a certain address range gets reused/freed for initrd.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: oops 2.6.24.2 + grsecurity-2.1.11-2.6.24.2-200802192340

Postby stanojr » Sun Mar 02, 2008 7:45 am

PaX Team wrote:
stanojr wrote:so here it is http://blackhole.sk/~stanojr/grsec/
thanks, can you try test33? if it still fails, i'll also need your arch/x86/boot/compressed/vmlinux.bin and probably you'll have to patch in a small printk or two to figure out why a certain address range gets reused/freed for initrd.


when i compile 2.6.24.3 with test33 i got this error
LD init/built-in.o
LD .tmp_vmlinux1
arch/x86/ia32/built-in.o: In function `load_elf32_binary':
ia32_binfmt.c:(.text+0x3891): undefined reference to `pax_set_initial_flags'
fs/built-in.o: In function `load_elf_binary':
binfmt_elf.c:(.text+0x2f9fa): undefined reference to `pax_set_initial_flags'

this is some other problem

i create interdiff between test30 and test33 and apply it to latest grsec kernel without warning
and it boot without oops or some other error in dmesg, so i think it is ok, thanks :)
stanojr
 
Posts: 6
Joined: Thu Apr 12, 2007 2:13 pm

Re: oops 2.6.24.2 + grsecurity-2.1.11-2.6.24.2-200802192340

Postby PaX Team » Sun Mar 02, 2008 7:52 am

stanojr wrote:when i compile 2.6.24.3 with test33 i got this error
LD init/built-in.o
LD .tmp_vmlinux1
arch/x86/ia32/built-in.o: In function `load_elf32_binary':
ia32_binfmt.c:(.text+0x3891): undefined reference to `pax_set_initial_flags'
fs/built-in.o: In function `load_elf_binary':
binfmt_elf.c:(.text+0x2f9fa): undefined reference to `pax_set_initial_flags'
it's a typical error when people copy their grsec .config back into a PaX-only kernel without any changes, the PaX flag control must obviously be set back to none by hand.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm


Return to grsecurity development