Gentoo Archives: gentoo-hardened

From: Michael Decker <MDecker@×××××.de>
To: RSBAC Discussion and Announcements <rsbac@×××××.org>, gentoo-hardened@l.g.o
Subject: [gentoo-hardened] Gentoo / RSBAC / Encrypted Root / Unmount fails
Date: Tue, 11 Jul 2006 08:13:53
Message-Id: 44B35D3F.6080301@tesis.de
1 Hi,
2
3 could somebody help me to solve this problem. I try to encrypting whole
4 root device by doing this howto:
5
6
7 So my booting fails caused by an unmount error.
8
9 On booting an own created initrd will be started to open luks encrypted
10 filesystem, so this last steps of linuxrc-script [2] fails (on umount
11 command):
12
13 --- SNIP ---
14 pivot_root . initrd
15
16 # Start init and flush ram device exec
17 chroot . /bin/sh <<- EOF >/dev/console 2>&1
18 umount initrd
19 rm -rf initrd
20 blockdev --flushbufs /dev/ram0
21 exec /sbin/init ${CMDLINE}
22 EOF
23 --- SNAP ---
24
25 So I get this error:
26 --- SNIP ---
27 EXT3 FS on dm-0, internal journal
28 EXT3-fs: dm-0: 1 orphan inode deleted
29 EXT3-fs: recovery complete.
30 EXT3-fs: mounted filesystem with journal data mode.
31 0000000037|rsbac_free_dat_dentry(): freeing dat dir dentries
32 0000000038|do_umount() [sys_umount()]: umount failed -> calling
33 rsbac_mount for Device 01:00
34 --- SNAP ---
35
36 I've run the kernel with this options:
37 --- SNIP ---
38 Kernel command line: root=/dev/ram0 rw init=/linuxrc rsbac_softmode
39 console=ttyS0,57600 console=tty0
40 --- SNAP ---
41
42 Is this a RSBAC problem? Do I have to modify the script [2]? Perhaps
43 could somebody give a suggestion?
44
45 Best regards,
46 Michael Decker
47
48 [1]
49 http://gentoo-wiki.com/SECURITY_Encrypting_Root_Filesystem_with_DM-Crypt_with_LUKS
50 [2]
51 http://gentoo-wiki.com/SECURITY_Encrypting_Root_Filesystem_with_DM-Crypt_with_LUKS#Initrd_Scripts
52 --
53 Michael Decker Michael.Decker@×××××.de
54 TESIS SYSware GmbH http://www.tesis.de
55 Baierbrunnerstr. 15 * 81379 Muenchen * Tel. +49 89 747377-0
56
57 --
58 gentoo-hardened@g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] Gentoo / RSBAC / initrd / Unmount fails (Encrypting HD) Michael Decker <MDecker@×××××.de>
Re: [gentoo-hardened] Gentoo / RSBAC / Encrypted Root / Unmount fails dante <dante@×××××××××××××××.net>