Gentoo Archives: gentoo-hardened

From: Andreas Philipp <philipp.andreas@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] xen + pax + grsec
Date: Sun, 12 Nov 2006 23:35:22
Message-Id: 8F21D2D4-C885-4625-800E-EECAB22E4D86@gmail.com
In Reply to: Re: [gentoo-hardened] xen + pax + grsec by Brad Plant
1 Hi Brad,
2
3 After compiling the patched kernel (either 2.6.16-28-xen or 2.16.6.29-
4 xen) linking fails. Here the error:
5 LD init/built-in.o
6 LD vmlinux
7 fs/built-in.o: In function `setup_arg_pages':
8 : undefined reference to `arch_align_stack'
9 make: *** [vmlinux] Error 1
10
11 If you want/need more info, like my config just let me know.
12
13 Cheers,
14 Andreas
15
16 Am 11.11.2006 um 11:33 schrieb Brad Plant:
17
18 > G'day Andreas,
19 >
20 > Andreas Philipp wrote:
21 >> My server is already running xen-3.0.2 with a 64bit system in
22 >> dom0. Now
23 >> I'm planning to build a domU (modified guest to export the "external"
24 >> ethernet interface to it) for an externally facing apache server.
25 >> Till
26 >> now I've only got xen-sources and selinux running together but no pax
27 >> and/or grsec.
28 >
29 > I knocked this patch up about a week ago. It applies against xen-
30 > sources
31 > 2.6.16.29 kernel (although it'll probably work with 2.6.16.31 too).
32 > I've
33 > been using it for almost a week in both dom0 and domU and it
34 > appears to
35 > work well. The PaX/GRSec part is based on a non-release patch for a
36 > 2.6.16.18 kernel that was in grsecurity.net/~spender a few months ago.
37 >
38 > Just apply the patch after emerging xen-sources. I was planning on
39 > making a special ebuild for it when the xen 3.0.3 ebuilds hit the
40 > tree.
41 >
42 > Let me know how it goes.
43 >
44 > Cheers,
45 >
46 > Brad
47 > <grsec-2.1.9-2.6.16.29-xen-3.0.3.patch.gz>
48
49 --
50 gentoo-hardened@g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] xen + pax + grsec Brad Plant <bplant@×××××××××××.au>