Gentoo Archives: gentoo-hardened

From: "Tóth Attila" <atoth@××××××××××.hu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] RELRO and Xorg
Date: Sat, 26 Oct 2013 20:23:52
Message-Id: ab52b2598d4b38cc01c4a9958f3a2f01.squirrel@atoth.sote.hu
In Reply to: Re: [gentoo-hardened] RELRO and Xorg by Alexander Tsoy
1 Even though I explicitly specify module loading order, I still have symbol
2 problems upon loading full relro radeon.
3 --
4 dr Tóth Attila, Radiológus, 06-20-825-8057
5 Attila Toth MD, Radiologist, +36-20-825-8057
6
7 2013.Október 25.(P) 15:18 időpontban Alexander Tsoy ezt írta:
8 > В Wed, 2 Oct 2013 22:58:35 +0200
9 > "Tóth Attila" <atoth@××××××××××.hu> пишет:
10 >
11 >> 2013.Október 2.(Sze) 21:07 időpontban Magnus Granberg ezt írta:
12 >> > onsdag 02 oktober 2013 20.41.32 skrev Alex Efros:
13 >> >> Hi!
14 >> >>
15 >> >> On Tue, Oct 01, 2013 at 09:21:00PM +0200, Hinnerk van Bruinehsen
16 >> wrote:
17 >> >> > > I can test proprietary nvidia if someone provide me with modified
18 >> >> ebuild
19 >> >> > > or patch or instructions what's to do.
20 >> >> >
21 >> >> > If you want to try, you could try the xorg-2.eclass from here:
22 >> >> I've tried both rebuilding only xorg-server first, restart X, then
23 >> >> rebuilde all x11-drivers/* packages and reboot (to reload kernel
24 >> >> module) - in both cases everything works fine with proprietary
25 >> nvidia.
26 >> >>
27 >> >> I've also tried nouveau and nv drivers, but got "Failed to load …
28 >> >> undefined symbol: …" errors (with different symbols for each driver).
29 >> >> Maybe this happens because some other libs should be recompiled, or
30 >> >> because of already loaded nvidia kernel module.
31 >> >
32 >> > When i tred nouveau and the radeaon driver i needed to define the load
33 >> > order of
34 >> > the drivers modules else i did get undefined symbols. On radeon i
35 >> could
36 >> > not
37 >> > even load some of the needed modules. But all this was some long time
38 >> ago.
39 >> > /Magnus
40 >> >
41 >> Aha!
42 >>
43 >> As a last step I also compiled radeon with full relro. And Xorg fails to
44 >> load.
45 >> The error message says:
46 >> Failed to load /usr/lib64/xorg/modules/drivers/radeon_drv.so:
47 >> /usr/lib64/xorg/modules/drivers/radeon_drv.so: undefined symbol:
48 >> exaWaitSync
49 >>
50 >> So radeon still needs lazy. But Xorg and other drivers are RELRO now.
51 >> I have to say the first load of X takes a bit longer than usuall - makes
52 >> sense because of the BIND_NOW...
53 >>
54 >> How I can define the load order of the modules?
55 >> I may play around with it. A bit more false sense of security! :-)
56 >>
57 >> Thx: Dw.
58 >
59 > Same problem with glamor. See comment 1 for an example of how to
60 > define the load order of modules.
61 >
62 > https://bugs.gentoo.org/show_bug.cgi?id=488906
63 >
64 > --
65 > Alexander Tsoy
66 >
67 >