Gentoo Archives: gentoo-hardened

From: subscryer@×××××.com
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] Grub not working anymore (but boot does)
Date: Wed, 30 Nov 2016 09:26:02
Message-Id: c5fe3608-cb04-750f-2290-8c254315a7e5@gmail.com
1 Entirely by accident, I updated my ancient version of grub. Once I found
2 out I said to myself that it would be better to update the boot stages
3 but this is what happens:
4
5 ~ # grub
6 grub: asmstub.c:215: grub_stage2: Assertion `simstack_alloc_base !=
7 ((void *) -1)' failed.
8 Aborted
9
10 I hadn't run grub in AGES, so I can't say what/when it broke. The good
11 news is the machine still boots but I'm not in a reliable condition.
12
13 equery l grub
14 * Searching for grub ...
15 [IP-] [ ] sys-boot/grub-0.97-r16:0
16
17 Relevant kern.log:
18 Nov 30 09:55:45 phantom kernel: [61181.759120] REISERFS warning (device
19 sda3): jdm-20002 reiserfs_xattr_get: Invalid hash for xattr
20 (user.pax.flags) associated with [1919251317 2019651630 0x616c662e UNKNOWN]
21 Nov 30 09:55:45 phantom kernel: [61181.958737] grsec: From 127.0.0.6:
22 denied RWX mmap of <anonymous mapping> by /sbin/grub[grub:9291]
23 uid/euid:0/0 gid/egid:0/0, parent /bin/bash[bash:2357] uid/euid:0/0
24 gid/egid:0/0
25 Nov 30 09:55:45 phantom kernel: [61181.959072] grsec: From 127.0.0.6:
26 denied resource overstep by requesting 4096 for RLIMIT_CORE against
27 limit 0 for /sbin/grub[grub:9291] uid/euid:0/0 gid/egid:0/0, parent
28 /bin/bash[bash:2357] uid/euid:0/0 gid/egid:0/0
29
30 # paxctl-ng -v /sbin/grub
31 /sbin/grub:
32 XATTR_PAX : -em--
33
34 # grep PAX /usr/src/linux/.config
35 CONFIG_PAX_PER_CPU_PGD=y
36 CONFIG_PAX_ENABLE_PAE=y
37 CONFIG_PAX_USERCOPY_SLABS=y
38 CONFIG_PAX=y
39 # CONFIG_PAX_SOFTMODE is not set
40 # CONFIG_PAX_PT_PAX_FLAGS is not set
41 CONFIG_PAX_XATTR_PAX_FLAGS=y
42 # CONFIG_PAX_NO_ACL_FLAGS is not set
43 CONFIG_PAX_HAVE_ACL_FLAGS=y
44 # CONFIG_PAX_HOOK_ACL_FLAGS is not set
45 CONFIG_PAX_NOEXEC=y
46 CONFIG_PAX_PAGEEXEC=y
47 CONFIG_PAX_SEGMEXEC=y
48 CONFIG_PAX_EMUTRAMP=y
49 CONFIG_PAX_MPROTECT=y
50 # CONFIG_PAX_MPROTECT_COMPAT is not set
51 # CONFIG_PAX_ELFRELOCS is not set
52 CONFIG_PAX_KERNEXEC=y
53 CONFIG_PAX_KERNEXEC_MODULE_TEXT=4
54 CONFIG_PAX_ASLR=y
55 CONFIG_PAX_RANDKSTACK=y
56 CONFIG_PAX_RANDUSTACK=y
57 CONFIG_PAX_RANDMMAP=y
58 CONFIG_PAX_MEMORY_SANITIZE=y
59 # CONFIG_PAX_MEMORY_STACKLEAK is not set
60 # CONFIG_PAX_MEMORY_STRUCTLEAK is not set
61 CONFIG_PAX_MEMORY_UDEREF=y
62 CONFIG_PAX_REFCOUNT=y
63 CONFIG_PAX_CONSTIFY_PLUGIN=y
64 CONFIG_PAX_USERCOPY=y
65 # CONFIG_PAX_USERCOPY_DEBUG is not set
66 # CONFIG_PAX_SIZE_OVERFLOW is not set
67 CONFIG_HAVE_PAX_INITIFY_INIT_EXIT=y
68 # CONFIG_PAX_LATENT_ENTROPY is not set
69
70 Thanks in advance for any help.

Replies

Subject Author
Re: [gentoo-hardened] Grub not working anymore (but boot does) "Tóth Attila" <atoth@××××××××××.hu>