Gentoo Logo
Gentoo Spaceship

Installation:
Gentoo Handbook
Installation Docs

Documentation:
Home
Listing
About Gentoo
Philosophy
Social Contract

Resources:
Bug Tracker
Developer List
Discussion Forums
Gentoo BitTorrents
Gentoo Linux Enhancement Proposals
IRC Channels
Mailing Lists
Mirrors
Name and Logo Guidelines
Online Package Database
Security Announcements
Staffing Needs
Supporting Vendors
View our CVS

Graphics:
Logos and themes
Icons
ScreenShots

Miscellaneous Resources:
Gentoo Linux Store
Gentoo-hosted projects
IBM dW/Intel article archive




List Archive: gentoo-hardened
Navigation:
Lists: gentoo-hardened: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-hardened@g.o
From: Natanael Copa <natanael.copa@...>
Subject: Re: grsec in qemu/kvm gives PAX: attempted to modify kernel code
Date: Thu, 05 Jul 2007 12:46:11 +0200
On Thu, 2007-07-05 at 11:24 +0200, pageexec@... wrote:
> On 5 Jul 2007 at 10:19, Natanael Copa wrote:
> 
> > I'm tryning to run a gentoo hardened kernel as a qemu guest but PAX is
> > not happy. It works fine in vmware.
> 
> 'fine' is a relative word here, see below ;-).
> 
> > Any ideas how to find out what this really is?
> > 
> > I tried kvm-28 (with kvm-intel) and qemu-0.9 (non kvm).
> [...] 
> > PAX: swapper:1, uid/euid: 0/0, attempted to modify kernel code at virtual address c0551c08
> >  printing eip:
> > 0000e9d7

[...]

> and after a split second of reflection one
> can figure out that there's indeed a bug in there in that KERNEXEC
> can shoot itself in the foot so to speak.

[...]

> for an extra confirmation, can you post the output of
> 
>    egrep 'swapper_p|MODULES_| _data' System.map
> 
> ?

localhost kout # egrep 'swapper_p|MODULES_| _data' System.map
c0551000 R swapper_pg_dir
c0594000 D MODULES_VADDR
c0c00000 D MODULES_END
c0c00000 D _data

> 
> in any case, thanks for the report, i'll fix it for 2.6.22.
> 

Thanks!

-- 
gentoo-hardened@g.o mailing list


References:
grsec in qemu/kvm gives PAX: attempted to modify kernel code
-- Natanael Copa
Re: grsec in qemu/kvm gives PAX: attempted to modify kernel code
-- pageexec
Navigation:
Lists: gentoo-hardened: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Re: grsec in qemu/kvm gives PAX: attempted to modify kernel code
Next by thread:
hardened-sources + vserver
Previous by date:
Re: grsec in qemu/kvm gives PAX: attempted to modify kernel code
Next by date:
hardened-sources + vserver


Updated Jun 17, 2009

Donate to support our development efforts.

Gentoo Centric Hosting: vr.org

VR Hosted

Tek Alchemy

Tek Alchemy

SevenL.net

SevenL.net

php|architect

php|architect

Copyright 2001-2007 Gentoo Foundation, Inc. Questions, Comments? Email www@gentoo.org.