Gentoo Archives: gentoo-hardened

From: "Brian A. Davis" <bridavis@×××××××.net>
To: gentoo-hardened@l.g.o
Subject: Re: Netconsole in hardened kernel? (was Re: [gentoo-hardened] PAX: General protection fault, where logged?)
Date: Tue, 22 Jul 2008 02:50:27
Message-Id: 48854AEF.3060300@comcast.net
In Reply to: Re: Netconsole in hardened kernel? (was Re: [gentoo-hardened] PAX: General protection fault, where logged?) by "David C. Manuelda"
1 Unfortunately, no. From earlier in the thread:
2
3 "if the GPF triggers in code that doesn't expect it, then the kernel may
4
5 as well be too toast to get that out into the filesystem."
6
7
8 David C. Manuelda wrote:
9 > Aren't those messages logged in /var/log/messages despite the crash? I can see
10 > them when I have a crash like that and can't start my system.
11 >
12 > On Tuesday 22 July 2008 04:24:42 Brian A. Davis wrote:
13 >
14 >> Netconsole doesn't seem to be available int he hardened kernel. Am I
15 >> missing something?
16 >>
17 >> flagg src # ls -lt
18 >> total 16
19 >> drwxr-xr-x 21 root root 4096 Jul 21 22:23 linux-2.6.25.9
20 >> drwxr-xr-x 22 root root 4096 Jul 21 22:21 linux-2.6.24-hardened-r3
21 >> drwxr-xr-x 21 root root 4096 Jul 7 23:04 linux-2.6.23-hardened-r12
22 >> lrwxrwxrwx 1 root root 24 Jul 7 15:19 linux -> linux-2.6.24-hardened-r3
23 >> drwxr-xr-x 20 root root 4096 Jun 30 22:18 linux-2.6.23-hardened-r13
24 >> flagg src # cd linux
25 >> flagg linux # pwd
26 >> /usr/src/linux
27 >> flagg linux # grep NETCONSOLE .config
28 >> flagg linux #
29 >>
30 >> Thanks,
31 >> Brian
32 >>
33 >> Will Keaney wrote:
34 >>
35 >>> Brian A. Davis wrote:
36 >>>
37 >>>> I'm getting a PAX General protection fault, which outputs a stack
38 >>>> trace to the console (monitor), but there's no way for me to get it
39 >>>> since the machine is crashed at this point.
40 >>>>
41 >>>> Where would this be getting logged? grep PAX * in /var/log doesn't
42 >>>> turn up anything.
43 >>>>
44 >>>> Thanks,
45 >>>> Brian
46 >>>>
47 >>> There are a couple of ways to get the trace from this. One is to
48 >>> attach a serial console to the machine in question and log the crash
49 >>> from another computer (see
50 >>> /usr/src/linux/Documentation/serial-console.txt).
51 >>> Another is to configure netconsole, which will allow you to capture
52 >>> kernel messages from another machine over ethernet. See
53 >>> /usr/src/linux/Documentation/networking/netconsole.txt for
54 >>> instructions on this.
55 >>> If you have a digital camera, you can take a picture of the stack trace.
56 >>> Finally, you can transcribe it by hand. This is veeeery tedious.
57 >>>
58 >>> Hope this helps.
59 >>>
60 >>> Will
61 >>>
62 >
63 >
64 >