[gentoo-hardened] grsec in qemu/kvm gives PAX: attempted to modify kernel code

[Natanael Copa]

Hi,

I'm tryning to run a gentoo hardened kernel as a qemu guest but PAX is
not happy. It works fine in vmware.

Any ideas how to find out what this really is?

I tried kvm-28 (with kvm-intel) and qemu-0.9 (non kvm).

isapnp: No Plug & Play device found
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0x3f8 (irq = 4) is a 16450
RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12
serio: i8042 KBD port at 0x60,0x64 irq 1
serio: i8042 AUX port at 0x60,0x64 irq 12
NET: Registered protocol family 1
Using IPI Shortcut mode
PAX: swapper:1, uid/euid: 0/0, attempted to modify kernel code at virtual address c0551c08
 printing eip:
0000e9d7
*pgd = 4001e1
*pmd = 4001e1
Oops: 0003 [#1]
Modules linked in:
CPU:    0
EIP:    0060:[<0000e9d7>]    Not tainted VLI
EFLAGS: 00010202   (2.6.21-hardened-r3 #1)
eax: c0551000   ebx: 00000000   ecx: c0800000   edx: 00000302
esi: 000007ff   edi: 00000000   ebp: 00000000   esp: c111bfbc
ds: 0068   es: 0068   fs: 00d8  gs: 0000  ss: 0068
Process swapper (pid: 1, ti=c111a000 task=c7fd0a30 task.ti=c111a000)
Stack: ffd0faba 00000000 00001127 00090ddb fffffeff ffd0faba ffd0fb38 c055fc7b 
       00000000 00000001 000046d7 00000000 00000000 00000000 00000000 00000000 
       00000000 
Call Trace:
 =======================
Code: fe ff 0f 22 c0 89 35 60 40 55 c0 89 0d 64 40 55 c0 0f 22 c2 b9 00 00 40 c0 81 f9 00 00 c0 c0 73 16 89 ca c1 ea 16 a1 a4 07 c0 c0 <83> 24 90 fd 81 c1 00 00 40 00 eb e2 a1 8c d1 c1 c0 f6 c4 20 74 
EIP: [<0000e9d7>]  SS:ESP 0068:c111bfbc
Kernel panic - not syncing: Attempted to kill init!
Switched to high resolution mode on CPU 0



-- 
gentoo-hardened@g.o mailing list