1 |
Hi, |
2 |
|
3 |
could somebody help me to solve this problem. I try to encrypting whole |
4 |
root device by doing this howto: |
5 |
|
6 |
|
7 |
So my booting fails caused by an unmount error. |
8 |
|
9 |
On booting an own created initrd will be started to open luks encrypted |
10 |
filesystem, so this last steps of linuxrc-script [2] fails (on umount |
11 |
command): |
12 |
|
13 |
--- SNIP --- |
14 |
pivot_root . initrd |
15 |
|
16 |
# Start init and flush ram device exec |
17 |
chroot . /bin/sh <<- EOF >/dev/console 2>&1 |
18 |
umount initrd |
19 |
rm -rf initrd |
20 |
blockdev --flushbufs /dev/ram0 |
21 |
exec /sbin/init ${CMDLINE} |
22 |
EOF |
23 |
--- SNAP --- |
24 |
|
25 |
So I get this error: |
26 |
--- SNIP --- |
27 |
EXT3 FS on dm-0, internal journal |
28 |
EXT3-fs: dm-0: 1 orphan inode deleted |
29 |
EXT3-fs: recovery complete. |
30 |
EXT3-fs: mounted filesystem with journal data mode. |
31 |
0000000037|rsbac_free_dat_dentry(): freeing dat dir dentries |
32 |
0000000038|do_umount() [sys_umount()]: umount failed -> calling |
33 |
rsbac_mount for Device 01:00 |
34 |
--- SNAP --- |
35 |
|
36 |
I've run the kernel with this options: |
37 |
--- SNIP --- |
38 |
Kernel command line: root=/dev/ram0 rw init=/linuxrc rsbac_softmode |
39 |
console=ttyS0,57600 console=tty0 |
40 |
--- SNAP --- |
41 |
|
42 |
Is this a RSBAC problem? Do I have to modify the script [2]? Perhaps |
43 |
could somebody give a suggestion? |
44 |
|
45 |
Best regards, |
46 |
Michael Decker |
47 |
|
48 |
[1] |
49 |
http://gentoo-wiki.com/SECURITY_Encrypting_Root_Filesystem_with_DM-Crypt_with_LUKS |
50 |
[2] |
51 |
http://gentoo-wiki.com/SECURITY_Encrypting_Root_Filesystem_with_DM-Crypt_with_LUKS#Initrd_Scripts |
52 |
-- |
53 |
Michael Decker Michael.Decker@×××××.de |
54 |
TESIS SYSware GmbH http://www.tesis.de |
55 |
Baierbrunnerstr. 15 * 81379 Muenchen * Tel. +49 89 747377-0 |
56 |
|
57 |
-- |
58 |
gentoo-hardened@g.o mailing list |