Grsec for 2.4.32 and pax_flags error

[elektronet]

If I want to compile 2.4.32 with grsec I will get this message:

Code: Select all

 
[root@darkdemon:/usr/src/linux-2.4.32/fs/proc] # gcc -D__KERNEL__ -I/usr/src/linux--trigraphs -O2 -fno-strict-aliasing -fno-common -fomit-frame-pointer -pipe -mpreferred-stack-boundary=2 -march=athlon -fno-unit-at-a-time   -nostdinc -iwithprefix include -DKBUILD_BASENAME=array  -c -o array.o array.c
array.c: In function `proc_pid_stat':
array.c:371: error: structure has no member named `pax_flags'
array.c:371: error: structure has no member named `pax_flags'
array.c:423: error: structure has no member named `pax_flags'
array.c:423: error: structure has no member named `pax_flags'
array.c:424: error: structure has no member named `pax_flags'
array.c:424: error: structure has no member named `pax_flags'
array.c:425: error: structure has no member named `pax_flags'
array.c:425: error: structure has no member named `pax_flags'
array.c: In function `show_map':
array.c:583: error: structure has no member named `pax_flags'
array.c:583: error: structure has no member named `pax_flags'
array.c:584: error: structure has no member named `pax_flags'
array.c:584: error: structure has no member named `pax_flags'
array.c:594: error: structure has no member named `pax_flags'
array.c:594: error: structure has no member named `pax_flags'


[bofh]

I get almost the same errors. its something about pax_set_flags

i tried many different configurations, the only way i can make the compilation suceed is when i chose low level, even when i chose proc restrictions only i get that error.

[spender]

Don't enable the "remove addresses from /proc/<pid>/stat" feature if you don't enable PaX.

-Brad

[bofh]

Don't enable the "remove addresses from /proc/<pid>/stat" feature if you don't enable PaX.

-Brad

Great, that solved my problem, thanks for a great support spender.

[jbarton]

I am getting the same error, but I dont have "remove addresses from /proc/<pid>/stat" enabled in my config, I did , however, have MAC integration set to "direct", but I wasnt using that feature. Changing it to "none" fixed the issue.

gcc -D__KERNEL__ -I/usr/src/linux-2.4.32/include -Wall -Wstrict-prototypes -Wno-trigraphs -O2 -fno-strict-aliasing -fno-common -fomit-frame-pointer -pipe -mpreferred-stack-boundary=2 -march=k6 -nostdinc -iwithprefix include -DKBUILD_BASENAME=grsum -c -o grsum.o grsum.c
gcc -D__KERNEL__ -I/usr/src/linux-2.4.32/include -Wall -Wstrict-prototypes -Wno-trigraphs -O2 -fno-strict-aliasing -fno-common -fomit-frame-pointer -pipe -mpreferred-stack-boundary=2 -march=k6 -nostdinc -iwithprefix include -DKBUILD_BASENAME=gracl -c -o gracl.o gracl.c
gracl.c: In function `pax_set_flags':
gracl.c:1985: error: structure has no member named `pax_flags'
gracl.c:1987: error: structure has no member named `pax_flags'
gracl.c:1989: error: structure has no member named `pax_flags'
gracl.c:1991: error: structure has no member named `pax_flags'
gracl.c:1993: error: structure has no member named `pax_flags'
make[2]: *** [gracl.o] Error 1
make[2]: Leaving directory `/usr/src/linux-2.4.32/grsecurity'
make[1]: *** [first_rule] Error 2
make[1]: Leaving directory `/usr/src/linux-2.4.32/grsecurity'
make: *** [_dir_grsecurity] Error 2