Gentoo Archives: gentoo-hardened

From: Balint Szente <balint@×××××××××.ro>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] nvidia.ko with Grsecurity & PaX kernel
Date: Wed, 11 Sep 2013 16:57:16
Message-Id: 20130911195703.781c4e43@inspiro
1 Hello!
2
3
4 I have a Dell Inspiron N5110 laptop with Optimus. I used Xorg with the
5 Intel driver only until now, but I was thinking to start using the
6 nVidia card as well, because the HDMI output is connected directly to
7 the nVidia GPU.
8
9 My kernel:
10 Linux 3.10.1-hardened-r1 #4 SMP PREEMPT Sat Sep 7 17:26:02 EEST 2013
11 x86_64 Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz GenuineIntel GNU/Linux
12
13 Please find at the and of the mail the relevant kernel config part.
14
15 I emerged =nvidia-drivers-325.15 successfully, but I cannot load the
16 nvidia module:
17
18 # modprobe nvidia
19 modprobe: ERROR: could not insert 'nvidia': Exec format error
20
21 The kernel log does not contain any information about this. I tried
22 also with the stable 319.49 as well, but the error is the same.
23
24 Do you know whether this is a (known) bug in the driver/ebuild or is a
25 problematic GRSEC/PAX option in my kernel config?
26
27 Regards,
28 Balint
29
30 Relevant log:
31 CONFIG_PAX_KERNEXEC_PLUGIN=y
32 CONFIG_PAX_PER_CPU_PGD=y
33 CONFIG_PAX_USERCOPY_SLABS=y
34 CONFIG_GRKERNSEC=y
35 CONFIG_GRKERNSEC_CONFIG_CUSTOM=y
36 CONFIG_GRKERNSEC_PROC_GID=10
37 CONFIG_PAX=y
38 CONFIG_PAX_PT_PAX_FLAGS=y
39 CONFIG_PAX_NO_ACL_FLAGS=y
40 CONFIG_PAX_NOEXEC=y
41 CONFIG_PAX_PAGEEXEC=y
42 CONFIG_PAX_EMUTRAMP=y
43 CONFIG_PAX_MPROTECT=y
44 CONFIG_PAX_KERNEXEC=y
45 CONFIG_PAX_KERNEXEC_PLUGIN_METHOD_OR=y
46 CONFIG_PAX_KERNEXEC_PLUGIN_METHOD="or"
47 CONFIG_PAX_ASLR=y
48 CONFIG_PAX_RANDKSTACK=y
49 CONFIG_PAX_RANDUSTACK=y
50 CONFIG_PAX_RANDMMAP=y
51 CONFIG_PAX_MEMORY_STACKLEAK=y
52 CONFIG_PAX_MEMORY_STRUCTLEAK=y
53 CONFIG_PAX_MEMORY_UDEREF=y
54 CONFIG_PAX_REFCOUNT=y
55 CONFIG_PAX_CONSTIFY_PLUGIN=y
56 CONFIG_PAX_USERCOPY=y
57 CONFIG_PAX_SIZE_OVERFLOW=y
58 CONFIG_PAX_LATENT_ENTROPY=y
59 CONFIG_GRKERNSEC_KMEM=y
60 CONFIG_GRKERNSEC_RAND_THREADSTACK=y
61 CONFIG_GRKERNSEC_PROC_MEMMAP=y
62 CONFIG_GRKERNSEC_BRUTE=y
63 CONFIG_GRKERNSEC_MODHARDEN=y
64 CONFIG_GRKERNSEC_HIDESYM=y
65 CONFIG_GRKERNSEC_ACL_HIDEKERN=y
66 CONFIG_GRKERNSEC_ACL_MAXTRIES=3
67 CONFIG_GRKERNSEC_ACL_TIMEOUT=30
68 CONFIG_GRKERNSEC_PROC=y
69 CONFIG_GRKERNSEC_PROC_USERGROUP=y
70 CONFIG_GRKERNSEC_PROC_ADD=y
71 CONFIG_GRKERNSEC_LINK=y
72 CONFIG_GRKERNSEC_FIFO=y
73 CONFIG_GRKERNSEC_DEVICE_SIDECHANNEL=y
74 CONFIG_GRKERNSEC_CHROOT=y
75 CONFIG_GRKERNSEC_CHROOT_MOUNT=y
76 CONFIG_GRKERNSEC_CHROOT_DOUBLE=y
77 CONFIG_GRKERNSEC_CHROOT_PIVOT=y
78 CONFIG_GRKERNSEC_CHROOT_CHDIR=y
79 CONFIG_GRKERNSEC_CHROOT_CHMOD=y
80 CONFIG_GRKERNSEC_CHROOT_FCHDIR=y
81 CONFIG_GRKERNSEC_CHROOT_MKNOD=y
82 CONFIG_GRKERNSEC_CHROOT_SHMAT=y
83 CONFIG_GRKERNSEC_CHROOT_UNIX=y
84 CONFIG_GRKERNSEC_CHROOT_FINDTASK=y
85 CONFIG_GRKERNSEC_CHROOT_NICE=y
86 CONFIG_GRKERNSEC_CHROOT_SYSCTL=y
87 CONFIG_GRKERNSEC_CHROOT_CAPS=y
88 CONFIG_GRKERNSEC_RESLOG=y
89 CONFIG_GRKERNSEC_CHROOT_EXECLOG=y
90 CONFIG_GRKERNSEC_AUDIT_PTRACE=y
91 CONFIG_GRKERNSEC_AUDIT_MOUNT=y
92 CONFIG_GRKERNSEC_SIGNAL=y
93 CONFIG_GRKERNSEC_FORKFAIL=y
94 CONFIG_GRKERNSEC_TIME=y
95 CONFIG_GRKERNSEC_PROC_IPADDR=y
96 CONFIG_GRKERNSEC_RWXMAP_LOG=y
97 CONFIG_GRKERNSEC_DMESG=y
98 CONFIG_GRKERNSEC_HARDEN_PTRACE=y
99 CONFIG_GRKERNSEC_PTRACE_READEXEC=y
100 CONFIG_GRKERNSEC_RANDNET=y
101 CONFIG_GRKERNSEC_BLACKHOLE=y
102 CONFIG_GRKERNSEC_NO_SIMULT_CONNECT=y
103 CONFIG_GRKERNSEC_FLOODTIME=10
104 CONFIG_GRKERNSEC_FLOODBURST=6

Replies

Subject Author
Re: [gentoo-hardened] nvidia.ko with Grsecurity & PaX kernel "Amadeusz Sławiński" <amade@××××××.net>