1 |
Since this is a conflict between aufs2 and pax/grsec patches, i would like to see the view of the |
2 |
pax team too. Below are the two mails from aufs2 upstream together with the latest patch, which does |
3 |
workaround the problem and contains some additional comments. |
4 |
|
5 |
Since he is not subscribed, please keep him in CC. |
6 |
|
7 |
Am 25.05.2010 06:32, schrieb sfjro@×××××××××××××××××.net: |
8 |
> |
9 |
> "Tommy[D]": |
10 |
>> just tried to compile aufs2-standalone against my local kernel sources, b= |
11 |
>> ut get the attached failure |
12 |
>> for 2.6.33. The kernel is a development kernel from Gentoo with additiona= |
13 |
>> l pax and grsec patches. |
14 |
> |
15 |
> I found the pax and grsec patches declare members as 'const'. |
16 |
> grsecurity-2.1.14-2.6.33.4-201005151340.patch |
17 |
> pax-linux-2.6.33.4-test19.patch |
18 |
> |
19 |
> For instance, |
20 |
> |
21 |
> struct address_space_operations { |
22 |
> - int (*writepage)(struct page *page, struct writeback_control *wbc); |
23 |
> - int (*readpage)(struct file *, struct page *); |
24 |
> - void (*sync_page)(struct page *); |
25 |
> + int (* const writepage)(struct page *page, struct writeback_control *wbc); |
26 |
> + int (* const readpage)(struct file *, struct page *); |
27 |
> + void (* const sync_page)(struct page *); |
28 |
> |
29 |
> It means setting writepage (and other members) is prohibited. But aufs |
30 |
> sets them dynamically. I think this is the cause of your problem. |
31 |
> I don't know whether making them 'const' is necessary or not. |
32 |
> |
33 |
> |
34 |
> J. R. Okajima |
35 |
> |
36 |
> ------------------------------------------------------------------------------ |
37 |
> |
38 |
> |
39 |
|
40 |
and |
41 |
|
42 |
>> If you really need to co-work aufs and grsec/pax, then this patch will |
43 |
>> > solve the problem. But I don't think it a good approach. |
44 |
> It was broken. Here is an updated one. |
45 |
> |
46 |
> J. R. Okajima |
47 |
> |
48 |
|
49 |
|
50 |
-- |
51 |
Thomas Sachau |
52 |
|
53 |
Gentoo Linux Developer |