Gentoo Archives: gentoo-hardened

From: Alexander Tsoy <alexander@××××.me>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] RELRO and Xorg
Date: Fri, 25 Oct 2013 13:18:35
Message-Id: 20131025171822.0eb0e725@work.puleglot
In Reply to: Re: [gentoo-hardened] RELRO and Xorg by "Tóth Attila"
1 В Wed, 2 Oct 2013 22:58:35 +0200
2 "Tóth Attila" <atoth@××××××××××.hu> пишет:
3
4 > 2013.Október 2.(Sze) 21:07 időpontban Magnus Granberg ezt írta:
5 > > onsdag 02 oktober 2013 20.41.32 skrev Alex Efros:
6 > >> Hi!
7 > >>
8 > >> On Tue, Oct 01, 2013 at 09:21:00PM +0200, Hinnerk van Bruinehsen wrote:
9 > >> > > I can test proprietary nvidia if someone provide me with modified
10 > >> ebuild
11 > >> > > or patch or instructions what's to do.
12 > >> >
13 > >> > If you want to try, you could try the xorg-2.eclass from here:
14 > >> I've tried both rebuilding only xorg-server first, restart X, then
15 > >> rebuilde all x11-drivers/* packages and reboot (to reload kernel
16 > >> module) - in both cases everything works fine with proprietary nvidia.
17 > >>
18 > >> I've also tried nouveau and nv drivers, but got "Failed to load …
19 > >> undefined symbol: …" errors (with different symbols for each driver).
20 > >> Maybe this happens because some other libs should be recompiled, or
21 > >> because of already loaded nvidia kernel module.
22 > >
23 > > When i tred nouveau and the radeaon driver i needed to define the load
24 > > order of
25 > > the drivers modules else i did get undefined symbols. On radeon i could
26 > > not
27 > > even load some of the needed modules. But all this was some long time ago.
28 > > /Magnus
29 > >
30 > Aha!
31 >
32 > As a last step I also compiled radeon with full relro. And Xorg fails to
33 > load.
34 > The error message says:
35 > Failed to load /usr/lib64/xorg/modules/drivers/radeon_drv.so:
36 > /usr/lib64/xorg/modules/drivers/radeon_drv.so: undefined symbol:
37 > exaWaitSync
38 >
39 > So radeon still needs lazy. But Xorg and other drivers are RELRO now.
40 > I have to say the first load of X takes a bit longer than usuall - makes
41 > sense because of the BIND_NOW...
42 >
43 > How I can define the load order of the modules?
44 > I may play around with it. A bit more false sense of security! :-)
45 >
46 > Thx: Dw.
47
48 Same problem with glamor. See comment 1 for an example of how to
49 define the load order of modules.
50
51 https://bugs.gentoo.org/show_bug.cgi?id=488906
52
53 --
54 Alexander Tsoy

Replies

Subject Author
Re: [gentoo-hardened] RELRO and Xorg "Tóth Attila" <atoth@××××××××××.hu>
Re: [gentoo-hardened] RELRO and Xorg "Tóth Attila" <atoth@××××××××××.hu>