1 |
On Thu, 02 Feb 2006 15:03:53 +0000 |
2 |
Ed W <lists@××××××××××.com> wrote: |
3 |
|
4 |
> I am trying to get Xen running under a hardened kernel. The machine |
5 |
> is currently booted with "selinux=1 enforcing=0". I am having |
6 |
> trouble compiling: |
7 |
|
8 |
File a bug. These unresolved symbols indicate those files have been |
9 |
compiled with the stack protector on, as can be seen from the |
10 |
compilation lines. However while the ebuild does do the 'filter-flags |
11 |
-fPIE -fstack-protector' the build is ignoring CFLAGS for some of its |
12 |
compilations. |
13 |
|
14 |
An alternative for now, is to switch to the -hardenednopiessp variant |
15 |
of your compiler and build it with that. |
16 |
|
17 |
> gcc -DDEBUG -D_ACPI_ -DTEXTADDR=0x000D0000 -I. -I../../../tools/libxc |
18 |
> -Wall -fno-builtin -O2 -msoft-float -m32 -march=i686 -D__ASSEMBLY__ |
19 |
> -DDEBUG -D_ACPI_ -DTEXTADDR=0x000D0000 -c trap.S |
20 |
> gcc -DDEBUG -D_ACPI_ -DTEXTADDR=0x000D0000 -I. -I../../../tools/libxc |
21 |
> -Wall -fno-builtin -O2 -msoft-float -m32 -march=i686 -c vm86.c |
22 |
> gcc -DDEBUG -D_ACPI_ -DTEXTADDR=0x000D0000 -I. -I../../../tools/libxc |
23 |
> -Wall -fno-builtin -O2 -msoft-float -m32 -march=i686 -c setup.c |
24 |
> gcc -DDEBUG -D_ACPI_ -DTEXTADDR=0x000D0000 -I. -I../../../tools/libxc |
25 |
> -Wall -fno-builtin -O2 -msoft-float -m32 -march=i686 -c util.c |
26 |
> cpp -P -DDEBUG -D_ACPI_ -DTEXTADDR=0x000D0000 vmxassist.ld > |
27 |
> vmxassist.tmp ld -o vmxassist -m elf_i386 -nostdlib --fatal-warnings |
28 |
> -N -T vmxassist.tmp head.o trap.o vm86.o setup.o util.o |
29 |
> vm86.o: In function `address': |
30 |
> vm86.c:(.text+0x19): undefined reference to `__guard' |
31 |
> vm86.c:(.text+0x56): undefined reference to `__stack_smash_handler' |
32 |
> vm86.o: In function `trace': |
33 |
> vm86.c:(.text+0xe9): undefined reference to `__guard' |
34 |
> vm86.c:(.text+0x141): undefined reference to `__guard' |
35 |
> vm86.c:(.text+0x15d): undefined reference to `__stack_smash_handler' |
36 |
> vm86.o: In function `getreg': |
37 |
> vm86.c:(.text+0x278): undefined reference to `__guard' |
38 |
> vm86.o: In function `.L23': |
39 |
> ...etc... |
40 |
> |
41 |
> |
42 |
> I have tried various combinations of compiler using gcc-config. |
43 |
> Neither gcc-3.4.4 or gcc-3.3.6 seem to do any better, hardened or not |
44 |
> |
45 |
> I suspect that this could be a problem with the compiler still using |
46 |
> some hardend profile despite me asking for a non-hardened gcc? Can |
47 |
> anyone please help debug this |
48 |
> |
49 |
> Ed W |
50 |
|
51 |
|
52 |
-- |
53 |
Kevin F. Quinn |