grsecurity forums

Hello,

when I try to compile kernel 2.6.19.3 with the latest patch, I get a lot of "missing initializer" warning. Then, I get this warning:

LD .tmp_vmlinux1
ld: .tmp_vmlinux1: warning: allocated section `.text.align' not in segment
ld: .tmp_vmlinux1: warning: allocated section `.module.text' not in segment
KSYM .tmp_kallsyms1.S
AS .tmp_kallsyms1.o
LD .tmp_vmlinux2
ld: .tmp_vmlinux2: warning: allocated section `.text.align' not in segment
ld: .tmp_vmlinux2: warning: allocated section `.module.text' not in segment
KSYM .tmp_kallsyms2.S
AS .tmp_kallsyms2.o
LD .tmp_vmlinux3
ld: .tmp_vmlinux3: warning: allocated section `.text.align' not in segment
ld: .tmp_vmlinux3: warning: allocated section `.module.text' not in segment
KSYM .tmp_kallsyms3.S
AS .tmp_kallsyms3.o
LD vmlinux
ld: vmlinux: warning: allocated section `.text.align' not in segment
ld: vmlinux: warning: allocated section `.module.text' not in segment

And at the end, I get this error:

CC arch/i386/boot/compressed/misc.o
OBJCOPY arch/i386/boot/compressed/vmlinux.bin
/bin/sh: line 1: 29592 File size limit exceededobjcopy -O binary -R .note -R .comment -S vmlinux arch/i386/boot/compressed/vmlinux.bin
make[2]: *** [arch/i386/boot/compressed/vmlinux.bin] Error 153
make[1]: *** [arch/i386/boot/compressed/vmlinux] Error 2
make: *** [bzImage] Error 2

What am I doing wrong?

I have RHEL 4 with GCC 3.4.6-3

Thanks!

Mhh what version of binutils do you use?

Look for example here:

http://forums.grsecurity.net/viewtopic.php?t=1627

Maybe pax team or spender found a workaround to compile newer grsec patches with a binutils version (< 2.17).
Until this happens you have to install a newer binutils version for kernel compilation ( see post by cocobello here: http://forums.grsecurity.net/viewtopic.php?t=1656 )

Thanks, I will try using binutils 2.17. I have the latest binutils package available for RHEL, which is a patched 2.15 version.

Thank you!

Update. I tried the new kernel, no compile errors.

Unfortunately, the machine didn't come back online, even though I setup grub to switch to the old kernel in case the new didn't work.

So I am now back online with the old kernel, and I fear I will have to wait a while before retrying grsecurity, as I cannot ask techs to monitor the server while it is a rebooting, as this is an unmanaged server.

Thanks everybody for the help!

Hello!

I managed to install the new kernel and make it work, anyhow I noticed that many config settings from the config file provided in the quickstart guide aren't working with newer kernels.

would it be possible to have an updated general config file for the quickstart guide? I am sure it would help newbies like me greatly.