Gentoo Archives: gentoo-hardened

From: "Tóth Attila" <atoth@××××××××××.hu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] RELRO and Xorg
Date: Wed, 02 Oct 2013 20:58:44
Message-Id: 96e1de6ab38757aed110b7333ed11ec4.squirrel@atoth.sote.hu
In Reply to: Re: [gentoo-hardened] RELRO and Xorg by Magnus Granberg
1 2013.Október 2.(Sze) 21:07 időpontban Magnus Granberg ezt írta:
2 > onsdag 02 oktober 2013 20.41.32 skrev Alex Efros:
3 >> Hi!
4 >>
5 >> On Tue, Oct 01, 2013 at 09:21:00PM +0200, Hinnerk van Bruinehsen wrote:
6 >> > > I can test proprietary nvidia if someone provide me with modified
7 >> ebuild
8 >> > > or patch or instructions what's to do.
9 >> >
10 >> > If you want to try, you could try the xorg-2.eclass from here:
11 >> I've tried both rebuilding only xorg-server first, restart X, then
12 >> rebuilde all x11-drivers/* packages and reboot (to reload kernel
13 >> module) - in both cases everything works fine with proprietary nvidia.
14 >>
15 >> I've also tried nouveau and nv drivers, but got "Failed to load …
16 >> undefined symbol: …" errors (with different symbols for each driver).
17 >> Maybe this happens because some other libs should be recompiled, or
18 >> because of already loaded nvidia kernel module.
19 >
20 > When i tred nouveau and the radeaon driver i needed to define the load
21 > order of
22 > the drivers modules else i did get undefined symbols. On radeon i could
23 > not
24 > even load some of the needed modules. But all this was some long time ago.
25 > /Magnus
26 >
27 Aha!
28
29 As a last step I also compiled radeon with full relro. And Xorg fails to
30 load.
31 The error message says:
32 Failed to load /usr/lib64/xorg/modules/drivers/radeon_drv.so:
33 /usr/lib64/xorg/modules/drivers/radeon_drv.so: undefined symbol:
34 exaWaitSync
35
36 So radeon still needs lazy. But Xorg and other drivers are RELRO now.
37 I have to say the first load of X takes a bit longer than usuall - makes
38 sense because of the BIND_NOW...
39
40 How I can define the load order of the modules?
41 I may play around with it. A bit more false sense of security! :-)
42
43 Thx: Dw.
44 --
45 dr Tóth Attila, Radiológus, 06-20-825-8057
46 Attila Toth MD, Radiologist, +36-20-825-8057

Replies

Subject Author
Re: [gentoo-hardened] RELRO and Xorg Alexander Tsoy <alexander@××××.me>