grsecurity forums

schokokeks linux-2.6.17.13 # LC_ALL="C" make
CHK include/linux/version.h
CHK include/linux/compile.h
UPD include/linux/compile.h
CC init/version.o
LD init/built-in.o
CC fs/binfmt_elf.o
fs/binfmt_elf.c: In function `load_elf_interp':
fs/binfmt_elf.c:379: error: `load_addr_set' undeclared (first use in this function)
fs/binfmt_elf.c:379: error: (Each undeclared identifier is reported only once
fs/binfmt_elf.c:379: error: for each function it appears in.)
fs/binfmt_elf.c:326: warning: unused variable `min_addr'
fs/binfmt_elf.c:326: warning: unused variable `max_addr'
fs/binfmt_elf.c:326: warning: unused variable `task_size'
fs/binfmt_elf.c: In function `load_elf_binary':
fs/binfmt_elf.c:728: warning: unused variable `task_size'
make[1]: *** [fs/binfmt_elf.o] Error 1
make: *** [fs] Error 2


Can you update the patch for .13?

Hello.
I have the same error with 2.6.17.13.

Might that be because patching fails
Looks like a new version is needed for 2.6.17.13

use the 2.6.17.11 kernel

I have the same error (Debian System) with kernel 2.6.17.11

If I disable support for ELF binaries in the kernel it compiles fine... but that shouldn't be right?

edit:
This is with PaX enabled... I've tried with both direct and hook MAC Integration... also tried with legacy ELF and the newer paxctl ELF Headers... nogo all times. Appears to be a Debian-specific problem?

Haven't noticed this but this is why 2.6.17.13 do not compile (as mbarbos pointed out).
Output from patch command:

Code: Select all

3 out of 20 hunks FAILED -- saving rejects to file fs/binfmt_elf.c.rej

I grabbed a kernel.org 2.6.17.11 and it compiled without a hitch.. Must be a Debian issue.

I was able to still use 'fakeroot make-kpkg' and use the resulting .deb package without issues...

granted, I haven't booted to it yet, but things look promising..

heya all,

there seem to be a lot of people who want a grsecurity for 2.6.17.13 kernels (like myself ) so i put up a grsec patch for that kernel:
http://people.linux-vserver.org/~harry/ ... 0150.patch

it fixes the binfmt_elf.c patchfailure.
how?:
analysing the diff between 2.6.17 and 2.6.18 and the patch pipacs made. then putting it all together in a way that we get a 2.6.17 kernel, with pax features on it (since binfmt_elf.c doesn't have any grsecurity stuff )

greetz, and let me know if it's good/not good/disaster (i'm running it for over 2 weeks now, on 3 machines, without any problems)