grsecurity forums

I recently tried to add grsecurity support to a running XFS based server. It would seem that XFS and grsecurity clash in a few key areas. I started to merge some of the rejects, but some of this stuff looks pretty important.

Has anyone done this before? Or should I plod on into the darkness?

I have two systems running kernel 2.4.18 with xfs/grs and one with 2.4.19 and xfs/grs. It's not too complicated to merge these patches ...

GEGE

Try wolk patch series http://www.sf.net/projects/wolk includes latest
grsecurity & xfs and many more...

Gentoo Linux has both XFS and grsecurity in their standard kernel. Give it a try; the Gentoo team seems to have thought long and hard about many things. They do stuff right :-).

>Gentoo Linux has both XFS and grsecurity in their standard kernel. Give >it a try; the Gentoo team seems to have thought long and hard about >many things.

The Gentoo Kernel is maintained by Michael J. Cohen (-mjc) and Michael took many out of WOLK

ciao, Marc

i'm also interested in merging xfs + grsecurity patch. wolk-patch is nice but i only need xfs+grsecurity (2.4.19).

any hints how to merge them ?

mux wrote:i'm also interested in merging xfs + grsecurity patch. wolk-patch is nice but i only need xfs+grsecurity (2.4.19).

any hints how to merge them ?

Send me the URL of your wanted Patches (mostly XFS stuff) and I will merge them for you and send you a patch for vanilla 2.4.19. ok?

ciao, Marc

thanks,

but i would like to know how to merge them by myselve for the future.

-------------------------------

danke für das angebot.

aber ich würde trotzdem gerne wissen worauf man achten muss um es selber machen zu können. auch für zukünftige versionen (vom kernel oder der patches). ich kann dich ja nicht jedesmal belästigen

hightower wrote:

mux wrote:i'm also interested in merging xfs + grsecurity patch. wolk-patch is nice but i only need xfs+grsecurity (2.4.19).

any hints how to merge them ?

Send me the URL of your wanted Patches (mostly XFS stuff) and I will merge them for you and send you a patch for vanilla 2.4.19. ok?

ciao, Marc

Hi Marc,

I have myself tried to merge these two patches, and it was (syntactically) quite easy to do. However, XFS and grsecurity for 2.4.19 really seem to don't like each other. For example, after my patching (first grsecurity, then the XFS patches, some minor rejects had to be resolved) the /proc/modules file was missing and /proc/sys was a file instead of being a directory! God only knows what else went awry. So I really think that there is more work to do about it than just putting it somehow together.

If there is anybody who has put the grsecurity and XFS on 2.4.19 kernel together and the kernel works fine for him, PLEASE, PLEASE, PLEASE, tell us how to do it! Thanks a lot!

Cheers,
Peter