Gentoo Archives: gentoo-hardened

From: "Loránd Kelemen" <Lorand.Kelemen@××××××.hu>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] Adaptec i2o 2110S + hardened kernel --> kernel panic
Date: Thu, 20 Jul 2006 09:11:09
Message-Id: 605D0BF354BA854EAAF5BC079FDD21330112FCF5@EXCHANGE.ind.hu
1 Hi List Members!
2
3 Please be gentle, this is my first post.
4
5 I admin an NEC Express5800 / 120RC-2 with an Adaptec i2o 2110S raid controller. (All controller bios, firmware up-to-date)
6
7 The previous colleauge who took care of this machine hacked a kernel together that worked in a week...(patching a vanilla kernel with grsec, but that was more then an year ago).
8 I had one night.
9
10 I refreshed all packages, and started upgrading the kernel. The hardened-sources failed to detect the adapter.
11
12 (Not from this machine's output:)
13
14 Loading Adaptec I2O RAID: Version 2.4 Build 5go
15 Detecting Adaptec I2O RAID controllers...
16 ----- and then skipped the next part:
17 ACPI: PCI Interrupt 0000:03:05.1[A] -> GSI 21 (level, low) -> IRQ 18
18
19 Of course the kernel panicked without a root fs.
20
21 I tried with:
22 linux-2.6.14-hardened-r8
23 linux-2.6.16-hardened-r10
24
25 Messed around with the new i2o subsystem, tried passing such flags as pci=routeirq, to no avail. Looked around in BIOS, nothing outstanding.
26
27 Then used linux-2.6.16-gentoo-r12, which booted flawlessly.
28
29 Then tried patching this kernel, from the hardened-patches-2.6.16-8.extras.tar.bz2 patchset with:
30
31 4454_pax_curr_ip-fixes.patch
32 4450_grsec-2.1.9-2.6.16.19-200606041421.patch
33
34 Nothing more. Same panic.
35
36 Then my time ran out. The machine now runs the stock gentoo kernel, but I'd love to use the hardened, to complement my hardened profile.
37
38 All comments are welcome!
39
40 Regards,
41 Lorand Kelemen