grsecurity forums

Why is it I cannot use fbsplash using the grsecurity kernel patches? I have downloaded kernel 2.6.14.6 (http://www.kernel.org/pub/linux/kernel/ ... .6.tar.bz2) and applied the grsecurity patch of http://grsecurity.net/grsecurity-2.1.8- ... 7.patch.gz and extracted it. I applied it using patch -p1 < grsecurity-2.1.8-2.6.14.6-200601211647.patch. It applies sucessfully. However, when I downloaded http://dev.gentoo.org/~spock/projects/g ... -rc2.patch and applied it the same way I get some errors.

atching file Documentation/fb/00-INDEX
patching file Documentation/fb/splash.txt
patching file drivers/Makefile
Hunk #1 FAILED at 8.
Hunk #2 succeeded at 16 with fuzz 2 (offset -2 lines).
1 out of 2 hunks FAILED -- saving rejects to file drivers/Makefile.rej
patching file drivers/video/Kconfig
Hunk #1 FAILED at 759.
Hunk #2 succeeded at 1575 (offset 113 lines).
1 out of 2 hunks FAILED -- saving rejects to file drivers/video/Kconfig.rej
patching file drivers/video/Makefile
patching file drivers/video/cfbsplash.c
patching file drivers/video/console/bitblit.c
Hunk #2 succeeded at 85 (offset 29 lines).
Hunk #3 FAILED at 417.
1 out of 3 hunks FAILED -- saving rejects to file drivers/video/console/bitblit.c.rej
patching file drivers/video/console/fbcon.c
Hunk #2 FAILED at 109.
Hunk #3 succeeded at 212 (offset -87 lines).
Hunk #4 succeeded at 306 with fuzz 2 (offset -99 lines).
Hunk #5 succeeded at 463 (offset -107 lines).
Hunk #6 FAILED at 868.

I just want to use grsecurity with fbsplash... Is it the poor quality programming of Spock or the grsecurity staff?

You try to apply a patch for 2.6.16-rc2 (fbsplash) to a 2.6.14.6 kernel. That won't work. Try http://dev.gentoo.org/~spock/projects/g ... 6.14.patch from spocks directory.

I can apply each patch fine successfully by themselves. It is when I try to apply both to the same kernel I recieve the error. This indicates grsecurity and fbsplash patches chage some of the same files and such.

Sorry but i can't verify your problem. Just downloaded kernel 2.6.14.6 , patched grsec and after that patched fbsplash. Only 1 chunk didnt't apply cleanly und this one is easy to fix.

Code: Select all

diff -urN linux-2.6.14.6/include/linux/sysctl.h.orig linux-2.6.14.6/include/linux/sysctl.h
--- linux-2.6.14.6/include/linux/sysctl.h.orig  2006-02-10 15:27:49.000000000 +0100
+++ linux-2.6.14.6/include/linux/sysctl.h       2006-02-10 15:35:53.000000000 +0100
@@ -148,6 +148,7 @@
        KERN_SETUID_DUMPABLE=69, /* int: behaviour of dumps for setuid core */
        KERN_SPIN_RETRY=70,     /* int: number of spinlock retries */
        KERN_GRSECURITY=71,     /* grsecurity */
+       KERN_FBSPLASH=72,       /* string: path to fbsplash helper */

 #ifdef CONFIG_PAX_SOFTMODE
        KERN_PAX=99,            /* PaX control */


Thanks a lot I got it to work.