Page 1 of 1

Patch grsecurity-2.2.2-2.6.32.48-201111161802.patch

PostPosted: Sat Nov 19, 2011 5:10 pm
by markings
Hello,

Information about system:
Distribution: OpenSuSE 11.4

I'm trying to compile the latest longterm kernel 2.6.32.48 with patch grsecurity-2.2.2-2.6.32.48-201111161802.patch but "make" is failing with error:
Code: Select all
Makefile:555: *** Your gcc installation does not support plugins.  If the necessary headers for plugin support are missing, they should be installed.  On Debian, apt-get install gcc-<ver>-plugin-dev..  Stop.


Here is output of "make -d" http://susepaste.org/17644407

Any assistance would be helpful...

P.S. I've trying searching for corresponding package gcc-plugin but I was unable to locate one for OpenSuSE

Re: Patch grsecurity-2.2.2-2.6.32.48-201111161802.patch

PostPosted: Sun Nov 20, 2011 5:12 pm
by markings
Hello,

I'm updating this forum thread with information I've gather thus far. On openSuSE 11.4, gcc is shipped with plugin support disabled which halts the kernel from compiling with CONFIG_PAX_MEMORY_STACKLEAK enabled. My options to resolve this issue is either to: compile GCC 4.5 with plugin support enabled, possibly upgrade to 4.6, or disable the feature entirely. Thanks

Best Regards

Re: Patch grsecurity-2.2.2-2.6.32.48-201111161802.patch

PostPosted: Sun Nov 20, 2011 5:48 pm
by markings
Hello,

I got a response from OpenSuSE mailing list from individual who may or may not be associated with openSuSE directly but he informs me that --disable-plugin doesn't seem to be related to GCC plugin support being disabled. Thanks.

Re: Patch grsecurity-2.2.2-2.6.32.48-201111161802.patch

PostPosted: Sun Nov 20, 2011 9:09 pm
by spender
I've created a new option to 'make' for you in the latest patches. Run make with the DISABLE_PAX_PLUGINS=y argument, and you'll be able to compile with your version of gcc that lacks plugin support. Keep in mind that without plugin support, you're missing out on a number of security improvements.

-Brad