Gentoo Archives: gentoo-hardened

From: "Tóth Attila" <atoth@××××××××××.hu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Can't build 3.8.3: kernel/user_namespace.c In function 'userns_install'
Date: Fri, 19 Apr 2013 12:42:20
Message-Id: 3edeb7adbfdbe46bc1e05c8f1b42507e.squirrel@atoth.sote.hu
In Reply to: Re: [gentoo-hardened] Can't build 3.8.3: kernel/user_namespace.c In function 'userns_install' by "Anthony G. Basile"
1 I have non-hardened related problems on my laptop since 3.8.4.
2 The integrated e1000e NIC drops carrier unexpectedly. In the logs it seems
3 the NIC gets turned of for a moment, but won't come back despite another
4 message in the log. On that moment the wireless card is enabled
5 temporarily. It seemed to be kinda power-management issue from the
6 beginning. It is very annoying. The NIC cen be brought back by
7 unloading-reloading the driver. Since I'm using a hardened kernel with
8 modules locked, I can't do that. And I also don't want to play that game.
9 It doesn't happen on my server having integrated e1000e NICs on the mobo.
10
11 Recently I had time to dig into that, and have found some relevant links:
12 https://bbs.archlinux.org/viewtopic.php?id=159454
13 https://lkml.org/lkml/2013/1/18/147
14 https://bugzilla.kernel.org/show_bug.cgi?id=52021
15 https://lkml.org/lkml/2013/1/5/100
16
17 It's a known regression and there's a workaround (sysctl or udev). There
18 is a 5 element patch set also available by Konstantin Khlebnikov. That
19 solves the problem for me. But it's still not committed in the kernel. I
20 don't know if it will be committed or not, or what is the reason it's not
21 already included in the current kernel source.
22
23 I just wanted to let those know, who may also struggle with such a problem.
24
25 Regards:
26 Dw.
27 --
28 dr Tóth Attila, Radiológus, 06-20-825-8057
29 Attila Toth MD, Radiologist, +36-20-825-8057
30
31 2013.Április 19.(P) 14:19 időpontban Anthony G. Basile ezt írta:
32 > On 04/17/2013 10:24 AM, Alexander Tsoy wrote:
33 >> В Wed, 17 Apr 2013 16:07:39 +0300
34 >> ungifted01@×××××.com пишет:
35 >>
36 >>> Hi!
37 >>>
38 >>>
39 >>> Can't build hardened 3.8.3 (x86)
40 >>>
41 >>>
42 >>> CC kernel/kallsyms.o
43 >>> CC kernel/acct.o
44 >>> CC kernel/user_namespace.o
45 >>> kernel/user_namespace.c: In function 'userns_install':
46 >>> kernel/user_namespace.c:808:25: error: invalid operands to binary !=
47 >>> (have 'atomic_t' and 'int')
48 >>> make[1]: *** [kernel/user_namespace.o] Error 1
49 >>> make: *** [kernel] Error 2
50 >>>
51 >>>
52 >>
53 >> Hello
54 >>
55 >> This is a known issue
56 >> http://forums.grsecurity.net/viewtopic.php?t=3358&p=12707
57 >>
58 >
59 > Thanks for bringing that to my attention. Looks like 3.8.3 was not a
60 > good choice. Let me see if I can back port the fix or stabilize the
61 > next bump.
62 >
63 > --
64 > Anthony G. Basile, Ph. D.
65 > Chair of Information Technology
66 > D'Youville College
67 > Buffalo, NY 14201
68 > (716) 829-8197
69 >
70 >