Gentoo Archives: gentoo-hardened

From: Andreas Philipp <philipp.andreas@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] xen + pax + grsec
Date: Mon, 13 Nov 2006 09:09:43
Message-Id: 2DE8CD6D-7127-401B-8F30-0262804EFF98@gmail.com
In Reply to: Re: [gentoo-hardened] xen + pax + grsec by Brad Plant
1 I've tried enabling all of pax/grsec while disabling selinux but
2 without success. As long as I've enabled
3 PAX ->
4 Miscellaneous hardening features ->
5 Sanitize all freed memory
6 I even get another error in mm/page_allac.c:
7 CC mm/page_alloc.o
8 GZIP kernel/config_data.gz
9 mm/page_alloc.c: In function '__free_one_page':
10 mm/page_alloc.c:333: error: 'index' undeclared (first use in this
11 function)
12 mm/page_alloc.c:333: error: (Each undeclared identifier is reported
13 only once
14 mm/page_alloc.c:333: error: for each function it appears in.)
15 IKCFG kernel/config_data.h
16 make[1]: *** [mm/page_alloc.o] Error 1
17 make: *** [mm] Error 2 CC kernel/configs.o
18
19 Can you send me your working config so I can test whether it compiles
20 on my system?
21
22 Cheers,
23
24 Andreas
25
26
27
28 Am 13.11.2006 um 02:16 schrieb Brad Plant:
29
30 > Hi Andreas,
31 >
32 > Andreas Philipp wrote:
33 >> I'm compiling a kernel for x86_64 so that's no problem. Are there any
34 >> problems with support for 32bit binaries?
35 >
36 > I have not tested the 32bit support, but hopefully it will still work.
37 >
38 > As for your compile error: The patch that I sent was for xen, pax and
39 > grsec. The config you sent me has pax and pretty much all of grsec
40 > turned off, yet selinux is enabled. Try turning pax and grsec on (I'm
41 > guessing you will have to disable selinux?) and let me know how you
42 > go.
43 >
44 > Cheers,
45 >
46 > Brad
47 > --
48 > gentoo-hardened@g.o mailing list
49 >
50
51 --
52 gentoo-hardened@g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] xen + pax + grsec Brad Plant <bplant@×××××××××××.au>