Kernel not booting after applying GrSecurity patch

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Kernel not booting after applying GrSecurity patch

Postby johnspaul92 » Mon Jul 08, 2013 5:28 am

i applied the Grsecurity 3.9.4 test patch on the linux kernel 3.9 and when i tried to boot it on am335x GP evm board its not booting because it is unable to mount devtmpfs. So what should i do to solve this issue???
johnspaul92
 
Posts: 6
Joined: Mon May 27, 2013 4:17 am

Re: Kernel not booting after applying GrSecurity patch

Postby timbgo » Mon Jul 08, 2013 7:48 am

Gosh, that's so abstract without telling us tech info, which kernel, which exact patch.
I mean real info. That which you get by simply pasting over what went on in your terminal, like things that
Code: Select all
uname -r

will tell you...
timbgo
 
Posts: 295
Joined: Tue Apr 16, 2013 9:34 am

Re: Kernel not booting after applying GrSecurity patch

Postby johnspaul92 » Tue Jul 09, 2013 12:00 am

Iam using kernel version 3.9 and grsecurity test patch 3.9.4-201305292151. This is the bootlog when i tried booting on the am335x GP evm. My earlyprintk is not working so i had to read the contents of the __log_buf using the ccs software. that is why the bootlog is in this weird format.


Booting.Linux.on.physical.CPU.0x0
.Linux.version.3.9.0-grsec-00001-g8df0b44-dirty.(johns@localhost.localdomain).(gcc.version.4.7.3.20130226.(prerelease).(crosstool-NG.linaro-1.13.1-4.7-2013.03-20130313.-.Linaro.GCC.2013.03).).#23.SMP.Thu.Jul.4.14:52:37.EDT.2013
CPU:.ARMv7.Processor.[413fc082].revision.2.(ARMv7),.cr=10c53c7d
CPU:.PIPT./.VIPT.nonaliasing.data.cache,.VIPT.aliasing.instruction.cache
Machine:.Generic.AM33XX.(Flattened.Device.Tree),.model:.TI.AM335x.EVM
cma:.CMA:.reserved.16.MiB.at.8e800000
Memory.policy:.ECC.disabled,.Data.cache.writeback
On.node.0.totalpages:.65280
......X.B.....
free_area_init_node:.node.0,.pgdat.c07edac0,.node_mem_map.c0d4e000

8.(

Normal.zone:.512.pages.used.for.memmap
.0
..
Normal.zone:.0.pages.reserved
..@.)

Normal.zone:.65280.pages,.LIFO.batch:15

.8.$.....
CPU:.All.CPU(s).started.in.SVC.mode
......(
AM335X.ES2.0.(neon.)
.....X.A.....PERCPU:.Embedded.9.pages/cpu.@c0f58000.s13632.r8192.d15040.u36864

.H.3.....pcpu-alloc:.s13632.r8192.d15040.u36864.alloc=9*4096
......(
pcpu-alloc:.[0].0

.`.J.....Built.1.zonelists.in.Zone.order,.mobility.grouping.on...Total.pages:.64768


.Kernel.command.line:.omap_debugss_en.console=ttyO0,115200n8.earlyprintk=serial.root=/dev/nfs.nfsroot=172.24.190.59:/opt/arago/amsdk-nightly,nolock.rw.mem=256M.ip=dhcp
...H.3.....PID.hash.table.entries:.1024.(order:.0,.4096.bytes)
......P.?.....Dentry.cache.hash.table.entries:.32768.(order:.5,.131072.bytes)
..P.=.....Inode-cache.hash.table.entries:.16384.(order:.4,.65536.bytes)
....8.(.....__ex_table.already.sorted,.skipping.sort
.0
Memory:.255MB.=.255MB.total
......P.>.....Memory:.228740k/228740k.available,.33404k.reserved,.0K.highmem
...(
Virtual.kernel.memory.layout:.....vector..:.0xffff0000.-.0xffff1000...(...4.kB).....fixmap..:.0xfff00000.-.0xfffe0000...(.896.kB).....vmalloc.:.0xd0800000.-.0xff000000...(.744.MB).....lowmem..:.0xc0000000.-.0xd0000000...(.256.MB).....pkmap...:.0xbfe00000.-.0xc0000000...(...2.MB).....modules.:.0xbf000000.-.0xbfe00000...(..14.MB)
.text.:.0xc0008000.-.0xc04f4be4...(5043.kB)
.init.:.0xc0700000.-.0xc0752540...(.330.kB)
.data.:.0xc0754000.-.0xc07f05c8...(.626.kB)
..bss.:.0xc07f05c8.-.0xc0d4d348...(5492.kB)

.0
Hierarchical.RCU.implementation
..H.5......RCU.restricting.CPUs.from.NR_CPUS=2.to.nr_cpu_ids=1
.....(
NR_IRQS:16.nr_irqs:16.16
.X.C.....IRQ:.Found.an.INTC.at.0xfa200000.(revision.5.0).with.128.interrupts
......@
Total.of.128.interrupts.on.1.active.controller
...@./.....OMAP.clockevent.source:.GPTIMER1.at.24000000.Hz
..X.D.....sched_clock:.32.bits.at.24MHz,.resolution.41ns,.wraps.every.178956ms
.....@.).....OMAP.clocksource:.GPTIMER2.at.24000000.Hz

.8.".....Console:.colour.dummy.device.80x30

X.H.....Lock.dependency.validator:.Copyright.(c).2006.Red.Hat,.Inc.,.Ingo.Molnar
.0
....MAX_LOCKDEP_SUBCLASSES:..8
...0
....MAX_LOCK_DEPTH:
...48
..8.!
..MAX_LOCKDEP_KEYS:
.8191

.8.!
..CLASSHASH_SIZE:
...4096

.8."
..MAX_LOCKDEP_ENTRIES:.....16384

8."
..MAX_LOCKDEP_CHAINS:......32768

8."
..CHAINHASH_SIZE:
...16384

@.-......memory.used.by.lock.dependency.info:.3695.kB
....@.-......per.task-struct.memory.footprint:.1152.bytes
....H.7.....Calibrating.delay.loop....663.55.BogoMIPS.(lpj=3317760)..g......8.$.....pid_max:.default:.32768.minimum:.501.....4......0
Security.Framework.initialized
...8.#.....Mount-cache.hash.table.entries:.512......X......8.'.....CPU:.Testing.write.buffer.coherency:.ok..L......@.*.....CPU0:.thread.-1,.cpu.0,.socket.-1,.mpidr.0......pZ......P.:.....Setting.up.static.identity.map.for.0xc04f3ef0.-.0xc04f3f60
.=.....(
Brought.up.1.CPUs
.7>.....H.7.....SMP:.Total.of.1.processors.activated.(663.55.BogoMIPS)...Y>.....8.$.....CPU:.All.CPU(s).started.in.SVC.mode
P.....H.8
fdevtmpfs:.unable.to.create.devtmpfs.-14...+.....@.0.....
omap_hwmod:.debugss:._wait_target_disable.failed..z.....@.+.....
pinctrl.core:.initialized.pinctrl.subsystem.....m+......0
regulator-dummy:.no.parameters..yt......8.".....NET:.Registered.protocol.family.16
.H.....P.>.....DMA:.preallocated.256.KiB.pool.for.atomic.coherent.allocations...YT.....H.6.....
gpiochip_add:.registered.GPIOs.0.to.31.on.device:.gpio...HY.....0
OMAP.GPIO.hardware.version.0.1...0}.....H.7.....
gpiochip_add:.registered.GPIOs.32.to.63.on.device:.gpio.Z0......H.7.....
gpiochip_add:.registered.GPIOs.64.to.95.on.device:.gpio..r......H.8.....gpiochip_add:.registered.GPIOs.96.to.127.on.device:.gpioFGr
......No.ATAGs?
..r.....H.2.....hw-breakpoint:.debug.architecture.0x4.unsupported

.0
Serial:.AMBA.PL011.UART.driver...:c.....0
bio:.create.slab.<bio-0>.at.0....w
.7.3...omap-dma-engine.omap-dma-engine:.OMAP.DMA.engine.driverSUBSYSTEM=platform.DEVICE=+platform:omap-dma-engine......*J......H.3.....of_get_named_gpio_flags:.can't.parse.gpios.property......?

vbat:.5000.mV
....H.3.....of_get_named_gpio_flags:.can't.parse.gpios.property
......(
lis3_reg:.no.parameters..er.....0
SCSI.subsystem.initialized
-......@
usbcore:.registered.new.interface.driver.usbfs
...@.,.....usbcore:.registered.new.interface.driver.hub
.....@.).....usbcore:.registered.new.device.driver.usb
.@
.:.0...omap_i2c.44e0b000.i2c:.did.not.get.pins.for.i2c.error:.-19SUBSYSTEM=platform.DEVICE=+platform:44e0b000.i2c

p./.0...omap_i2c.44e0b000.i2c:.bus.0.rev0.11.at.400.kHzSUBSYSTEM=platform.DEVICE=+platform:44e0b000.i2c.v
h.2.....tps65910.0-002d:.No.interrupt.support,.no.core.IRQSUBSYSTEM=i2c.DEVICE=+i2c:0-002d
p5
......vrtc:.1800.mV...||:.....(
vrtc:.supplied.by.vbat..PE_
......vio:.at.1500.mV._na.....(
vio:.supplied.by.vbat....,......8.%.....vdd_mpu:.912.<-->.1312.mV.at.1325.mV
.....0
vdd_mpu:.supplied.by.vbat

.8.&.....vdd_core:.912.<-->.1150.mV.at.1137.mV....?......0
vdd_core:.supplied.by.vbat


.vdd3:.5000.mV...."......(
vdig1:.at.1800.mV
.G......(
vdig1:.supplied.by.vbat
..(
vdig2:.at.1800.mV
.I......(
vdig2:.supplied.by.vbat.J.@.....(
vpll:.at.1800.mV
...B.....(
vpll:.supplied.by.vbat....c.....(
vdac:.at.1800.mV
...e.....(
vdac:.supplied.by.vbat...v......(
vaux1:.at.1800.mV

.(
vaux1:.supplied.by.vbat.3f......(
vaux2:.at.3300.mV

.(
vaux2:.supplied.by.vbat.aS......(
vaux33:.at.3300.mV......r
(
vaux33:.supplied.by.vbat
.(
vmmc:.at.3300.mV
..o......(
vmmc:.supplied.by.vbat..||
.:.0...omap_i2c.4802a000.i2c:.did.not.get.pins.for.i2c.error:.-19SUBSYSTEM=platform.DEVICE=+platform:4802a000.i2c

p./.0...omap_i2c.4802a000.i2c:.bus.1.rev0.11.at.100.kHzSUBSYSTEM=platform.DEVICE=+platform:4802a000.i2c
..8.!.....Switching.to.clocksource.gp_timer
johnspaul92
 
Posts: 6
Joined: Mon May 27, 2013 4:17 am

Re: Kernel not booting after applying GrSecurity patch

Postby PaX Team » Fri Jul 12, 2013 7:02 pm

what is this kernel tree you're compiling exactly? it doesn't seem to be pure grsec and any other patches you have may very well need to be adapted to it. also try something newer like 3.10 and perhaps post your config, if we can reproduce this in qemu then we'll be able to fix this much faster.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm


Return to grsecurity support