Gentoo Archives: gentoo-hardened

From: Natanael Copa <natanael.copa@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] grsec in qemu/kvm gives PAX: attempted to modify kernel code
Date: Thu, 05 Jul 2007 09:49:09
Message-Id: 1183632371.5818.13.camel@localhost
In Reply to: Re: [gentoo-hardened] grsec in qemu/kvm gives PAX: attempted to modify kernel code by pageexec@freemail.hu
1 On Thu, 2007-07-05 at 11:24 +0200, pageexec@××××××××.hu wrote:
2 > On 5 Jul 2007 at 10:19, Natanael Copa wrote:
3 >
4 > > I'm tryning to run a gentoo hardened kernel as a qemu guest but PAX is
5 > > not happy. It works fine in vmware.
6 >
7 > 'fine' is a relative word here, see below ;-).
8 >
9 > > Any ideas how to find out what this really is?
10 > >
11 > > I tried kvm-28 (with kvm-intel) and qemu-0.9 (non kvm).
12 > [...]
13 > > PAX: swapper:1, uid/euid: 0/0, attempted to modify kernel code at virtual address c0551c08
14 > > printing eip:
15 > > 0000e9d7
16
17 [...]
18
19 > and after a split second of reflection one
20 > can figure out that there's indeed a bug in there in that KERNEXEC
21 > can shoot itself in the foot so to speak.
22
23 [...]
24
25 > for an extra confirmation, can you post the output of
26 >
27 > egrep 'swapper_p|MODULES_| _data' System.map
28 >
29 > ?
30
31 localhost kout # egrep 'swapper_p|MODULES_| _data' System.map
32 c0551000 R swapper_pg_dir
33 c0594000 D MODULES_VADDR
34 c0c00000 D MODULES_END
35 c0c00000 D _data
36
37 >
38 > in any case, thanks for the report, i'll fix it for 2.6.22.
39 >
40
41 Thanks!
42
43 --
44 gentoo-hardened@g.o mailing list