Gentoo Archives: gentoo-hardened

From: "Marcin Mirosław" <marcin@×××××.pl>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Problem with (?) hardened-sources-3.15.x on kvm-vm
Date: Fri, 29 Aug 2014 07:33:18
Message-Id: 54002C95.90908@mejor.pl
In Reply to: Re: [gentoo-hardened] Problem with (?) hardened-sources-3.15.x on kvm-vm by Alex Xu
1 W dniu 29.08.2014 o 01:13, Alex Xu pisze:
2 > On 28/08/14 05:02 PM, Sven Vermeulen wrote:
3 >> On Wed, Aug 27, 2014 at 05:34:20PM +0100, André Aparício wrote:
4 >>> I encountered the same problem with qemu/kvm but can't even login, I
5 >>> get random segfaults and even failed malloc assertions
6 >>> in /sbin/init, /sbin/rc or /bin/login (never past this).
7 >>>
8 >>> But it works fine with CONFIG_PAX_MEMORY_UDEREF disabled.
9 >>
10 >> I am not able to reproduce this :-(
11 >>
12 >> Host and guest are both on 3.15.5-hardened-r2 and both have UDEREF enabled.
13 >>
14 >> I tried emerging boost on the guest as recommended in another post but this
15 >> didn't fail.
16 >>
17 >> Wkr,
18 >> Sven Vermeulen
19 >>
20 >
21 > My VM has 12 CPUs but I use MAKEOPTS=-j3. Maybe this affects
22 > reproducibility.
23 >
24 > My host is of unknown kernel, but I'm pretty sure it's not Gentoo, let
25 > alone Hardened.
26 >
27 > Also, I am using <cpu mode="host-passthrough"/> in libvirt (equivalent
28 > to -cpu host in qemu opts), so PAX detects PCID and enables strong
29 > UDEREF. I will try with pax_weakuderef as soon as I get a chance to
30 > reboot the VM.
31
32 Fabulous "me too", I've got <cpu mode='host-model'> and guest have PCID
33 available:
34 dmesg |grep PCID
35 [ 0.020000] PAX: PCID detected
36 [ 0.020000] PAX: PCID detected
37 [ 0.020000] PAX: PCID detected
38
39
40 Snip from cpuinfo of guest:
41 processor : 2
42 vendor_id : GenuineIntel
43 cpu family : 6
44 model : 42
45 model name : Intel Xeon E312xx (Sandy Bridge)
46 stepping : 1
47 microcode : 0x1
48 cpu MHz : 3292.514
49 cache size : 4096 KB
50 physical id : 2
51 siblings : 1
52 core id : 0
53 cpu cores : 1
54 apicid : 2
55 initial apicid : 2
56 fpu : yes
57 fpu_exception : yes
58 cpuid level : 13
59 wp : yes
60 flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge
61 mca cmov pat pse36 clflush mmx fxsr sse sse2 ss syscall nx rdtscp lm
62 constant_tsc arch_perfmon rep_good nopl eagerfpu pni pclmulqdq ssse3
63 cx16 pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx
64 f16c rdrand hypervisor lahf_lm xsaveopt fsgsbase smep erms
65 bogomips : 6585.02
66 clflush size : 64
67 cache_alignment : 64
68 address sizes : 40 bits physical, 48 bits virtual
69 power management:

Replies

Subject Author
Re: [gentoo-hardened] Problem with (?) hardened-sources-3.15.x on kvm-vm "Anthony G. Basile" <basile@××××××××××××××.edu>