Patch grsecurity-2.2.2-2.6.32.48-201111161802.patch

Discuss and suggest new grsecurity features

Moderators: spender, PaX Team

Patch grsecurity-2.2.2-2.6.32.48-201111161802.patch

Postby markings » Sat Nov 19, 2011 5:10 pm

Hello,

Information about system:
Distribution: OpenSuSE 11.4

I'm trying to compile the latest longterm kernel 2.6.32.48 with patch grsecurity-2.2.2-2.6.32.48-201111161802.patch but "make" is failing with error:
Code: Select all
Makefile:555: *** Your gcc installation does not support plugins.  If the necessary headers for plugin support are missing, they should be installed.  On Debian, apt-get install gcc-<ver>-plugin-dev..  Stop.


Here is output of "make -d" http://susepaste.org/17644407

Any assistance would be helpful...

P.S. I've trying searching for corresponding package gcc-plugin but I was unable to locate one for OpenSuSE
markings
 
Posts: 4
Joined: Fri Nov 18, 2011 4:59 pm

Re: Patch grsecurity-2.2.2-2.6.32.48-201111161802.patch

Postby markings » Sun Nov 20, 2011 5:12 pm

Hello,

I'm updating this forum thread with information I've gather thus far. On openSuSE 11.4, gcc is shipped with plugin support disabled which halts the kernel from compiling with CONFIG_PAX_MEMORY_STACKLEAK enabled. My options to resolve this issue is either to: compile GCC 4.5 with plugin support enabled, possibly upgrade to 4.6, or disable the feature entirely. Thanks

Best Regards
markings
 
Posts: 4
Joined: Fri Nov 18, 2011 4:59 pm

Re: Patch grsecurity-2.2.2-2.6.32.48-201111161802.patch

Postby markings » Sun Nov 20, 2011 5:48 pm

Hello,

I got a response from OpenSuSE mailing list from individual who may or may not be associated with openSuSE directly but he informs me that --disable-plugin doesn't seem to be related to GCC plugin support being disabled. Thanks.
markings
 
Posts: 4
Joined: Fri Nov 18, 2011 4:59 pm

Re: Patch grsecurity-2.2.2-2.6.32.48-201111161802.patch

Postby spender » Sun Nov 20, 2011 9:09 pm

I've created a new option to 'make' for you in the latest patches. Run make with the DISABLE_PAX_PLUGINS=y argument, and you'll be able to compile with your version of gcc that lacks plugin support. Keep in mind that without plugin support, you're missing out on a number of security improvements.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm
Location: VA, USA


Return to grsecurity development

cron