grsecurity forums

Running Ubuntu Edgy Linux. "uname -a" produces "Linux ubuntu-xxx 2.6.17-11-generic #2 SMP Thu Feb 1 18:03:05 UTC 2007 x86_64 GNU/Linux". Hardware is an ASUS M2M32-SLI Delux MB with AMD K8 Athlon64 & 2GB RAM. Trying to compile a new kernel for the x86_64 architecture with VServer 2.0.2rc18 (the latest for this version of the kernel) and GRSecurity 2.1.9 using the kernel patch file "grsecurity-2.1.9-2.6.17.11-200609031316.patch".

The kernel compile using make-kpkg failed with following errors (extract):

In file included from arch/x86_64/ia32/ia32_binfmt.c:323:
arch/x86_64/ia32/../../../fs/binfmt_elf.c: In function ‘load_elf_interp’:
arch/x86_64/ia32/../../../fs/binfmt_elf.c:375: error: ‘load_addr_set’ undeclared (first use in this function)
arch/x86_64/ia32/../../../fs/binfmt_elf.c:375: error: (Each undeclared identifier is reported only once
arch/x86_64/ia32/../../../fs/binfmt_elf.c:375: error: for each function it appears in.)
arch/x86_64/ia32/../../../fs/binfmt_elf.c:322: warning: unused variable ‘task_size’
arch/x86_64/ia32/../../../fs/binfmt_elf.c:322: warning: unused variable ‘max_addr’
arch/x86_64/ia32/../../../fs/binfmt_elf.c:322: warning: unused variable ‘min_addr’
arch/x86_64/ia32/../../../fs/binfmt_elf.c: In function ‘load_elf32_binary’:
arch/x86_64/ia32/../../../fs/binfmt_elf.c:724: warning: unused variable ‘task_size’
arch/x86_64/ia32/../../../fs/binfmt_elf.c: In function ‘elf_core_dump’:
arch/x86_64/ia32/../../../fs/binfmt_elf.c:1811: warning: implicit declaration of function ‘gr_learn_resource’
make[2]: *** [arch/x86_64/ia32/ia32_binfmt.o] Error 1
make[1]: *** [arch/x86_64/ia32] Error 2
make[1]: Leaving directory `/usrsrc/usr/src/linux-source-2.6.17.11-vs202rc18-grsec219'
make: *** [debian/stamp-build-kernel] Error 2
(The full make-kpkg log file follows at the end of this message.)

The GRSec patch failed on Hunks #1, 5, 12, and 14 in the same file. Is there another patch file I should be using with this kernel version? If not, how do I resolve this?

The GRSec patch produced the following log:

patching file arch/alpha/kernel/module.c
patching file arch/alpha/kernel/osf_sys.c
patching file arch/alpha/kernel/ptrace.c
Hunk #1 FAILED at 15.
Hunk #2 succeeded at 290 with fuzz 1 (offset 6 lines).
1 out of 2 hunks FAILED -- saving rejects to file arch/alpha/kernel/ptrace.c.rej
patching file arch/alpha/mm/fault.c
patching file arch/arm/mm/mmap.c
patching file arch/i386/boot/compressed/head.S
patching file arch/i386/Kconfig
Hunk #1 succeeded at 1019 (offset 71 lines).
Hunk #2 succeeded at 1051 (offset 71 lines).
patching file arch/i386/Kconfig.cpu
patching file arch/i386/Kconfig.debug
patching file arch/i386/kernel/acpi/sleep.c
Hunk #1 FAILED at 10.
Hunk #2 FAILED at 25.
Hunk #3 FAILED at 67.
3 out of 3 hunks FAILED -- saving rejects to file arch/i386/kernel/acpi/sleep.c.rej
patching file arch/i386/kernel/alternative.c
Hunk #1 succeeded at 3 with fuzz 2.
Hunk #2 FAILED at 102.
1 out of 2 hunks FAILED -- saving rejects to file arch/i386/kernel/alternative.c.rej
patching file arch/i386/kernel/apic.c
Hunk #1 succeeded at 1177 (offset 1 line).
patching file arch/i386/kernel/apm.c
patching file arch/i386/kernel/asm-offsets.c
patching file arch/i386/kernel/cpu/common.c
Hunk #3 succeeded at 595 (offset 4 lines).
Hunk #4 succeeded at 616 (offset 4 lines).
Hunk #5 succeeded at 628 (offset 4 lines).
Hunk #6 succeeded at 646 (offset 4 lines).
Hunk #7 succeeded at 654 (offset 4 lines).
patching file arch/i386/kernel/crash.c
patching file arch/i386/kernel/doublefault.c
patching file arch/i386/kernel/efi.c
patching file arch/i386/kernel/efi_stub.S
patching file arch/i386/kernel/entry.S
Hunk #3 succeeded at 162 (offset 2 lines).
Hunk #4 succeeded at 218 (offset 2 lines).
Hunk #5 succeeded at 249 (offset 2 lines).
Hunk #6 succeeded at 303 (offset 2 lines).
Hunk #7 succeeded at 462 (offset 2 lines).
Hunk #8 succeeded at 472 (offset 2 lines).
Hunk #9 succeeded at 519 (offset 2 lines).
Hunk #10 succeeded at 627 (offset 2 lines).
Hunk #11 succeeded at 664 (offset 2 lines).
Hunk #12 succeeded at 746 (offset 2 lines).
patching file arch/i386/kernel/head.S
Hunk #13 FAILED at 568.
1 out of 13 hunks FAILED -- saving rejects to file arch/i386/kernel/head.S.rej
patching file arch/i386/kernel/i386_ksyms.c
patching file arch/i386/kernel/init_task.c
patching file arch/i386/kernel/ioport.c
patching file arch/i386/kernel/irq.c
patching file arch/i386/kernel/ldt.c
patching file arch/i386/kernel/module.c
patching file arch/i386/kernel/process.c
Hunk #8 succeeded at 635 (offset 2 lines).
Hunk #9 succeeded at 662 (offset 2 lines).
Hunk #10 succeeded at 832 (offset 2 lines).
Hunk #11 succeeded at 875 (offset 2 lines).
Hunk #12 succeeded at 941 (offset 2 lines).
patching file arch/i386/kernel/ptrace.c
patching file arch/i386/kernel/reboot.c
Hunk #1 FAILED at 25.
Hunk #2 succeeded at 155 (offset 17 lines).
Hunk #3 succeeded at 192 (offset 17 lines).
Hunk #4 succeeded at 206 (offset 17 lines).
Hunk #5 succeeded at 216 (offset 17 lines).
Hunk #6 succeeded at 244 (offset 17 lines).
Hunk #7 succeeded at 266 (offset 17 lines).
Hunk #8 succeeded at 274 (offset 17 lines).
Hunk #9 FAILED at 358.
2 out of 9 hunks FAILED -- saving rejects to file arch/i386/kernel/reboot.c.rej
patching file arch/i386/kernel/setup.c
Hunk #1 succeeded at 95 (offset 7 lines).
Hunk #2 succeeded at 1515 (offset 18 lines).
patching file arch/i386/kernel/signal.c
patching file arch/i386/kernel/smpboot.c
patching file arch/i386/kernel/syscall_table.S
patching file arch/i386/kernel/sysenter.c
patching file arch/i386/kernel/sys_i386.c
Hunk #1 succeeded at 100 (offset 1 line).
patching file arch/i386/kernel/traps.c
Hunk #2 succeeded at 60 (offset 1 line).
Hunk #3 succeeded at 141 (offset 1 line).
Hunk #4 succeeded at 250 (offset 1 line).
Hunk #5 succeeded at 278 (offset 2 lines).
Hunk #6 succeeded at 294 (offset 2 lines).
Hunk #7 succeeded at 311 (offset 2 lines).
Hunk #8 succeeded at 442 (offset 4 lines).
Hunk #9 succeeded at 460 (offset 4 lines).
Hunk #10 succeeded at 548 (offset 4 lines).
Hunk #11 succeeded at 584 (offset 4 lines).
Hunk #12 succeeded at 618 (offset 4 lines).
Hunk #13 succeeded at 698 (offset 4 lines).
Hunk #14 succeeded at 851 (offset 4 lines).
Hunk #15 succeeded at 1141 (offset 4 lines).
patching file arch/i386/kernel/vm86.c
patching file arch/i386/kernel/vmlinux.lds.S
patching file arch/i386/lib/checksum.S
patching file arch/i386/lib/getuser.S
patching file arch/i386/lib/mmx.c
patching file arch/i386/lib/putuser.S
patching file arch/i386/lib/usercopy.c
patching file arch/i386/mach-voyager/voyager_smp.c
patching file arch/i386/mm/boot_ioremap.c
patching file arch/i386/mm/extable.c
patching file arch/i386/mm/fault.c
patching file arch/i386/mm/hugetlbpage.c
patching file arch/i386/mm/init.c
Hunk #1 succeeded at 42 (offset 1 line).
Hunk #2 succeeded at 52 (offset 1 line).
Hunk #3 succeeded at 59 (offset 1 line).
Hunk #4 succeeded at 98 (offset 1 line).
Hunk #5 succeeded at 110 (offset 1 line).
Hunk #6 succeeded at 137 (offset 1 line).
Hunk #7 succeeded at 163 (offset 1 line).
Hunk #8 succeeded at 349 (offset 20 lines).
Hunk #9 succeeded at 372 with fuzz 1 (offset 20 lines).
Hunk #10 succeeded at 413 (offset 20 lines).
Hunk #11 succeeded at 426 (offset 20 lines).
Hunk #12 succeeded at 437 (offset 20 lines).
Hunk #13 succeeded at 495 (offset 20 lines).
Hunk #14 succeeded at 586 (offset 20 lines).
Hunk #15 succeeded at 603 (offset 20 lines).
Hunk #16 succeeded at 732 (offset 20 lines).
patching file arch/i386/mm/mmap.c
patching file arch/i386/mm/pageattr.c
patching file arch/i386/oprofile/backtrace.c
patching file arch/i386/power/cpu.c
patching file arch/ia64/ia32/binfmt_elf32.c
patching file arch/ia64/ia32/ia32priv.h
patching file arch/ia64/kernel/module.c
patching file arch/ia64/kernel/ptrace.c
Hunk #1 FAILED at 18.
Hunk #2 succeeded at 1452 (offset 4 lines).
1 out of 2 hunks FAILED -- saving rejects to file arch/ia64/kernel/ptrace.c.rej
patching file arch/ia64/kernel/sys_ia64.c
patching file arch/ia64/mm/fault.c
Hunk #1 FAILED at 10.
Hunk #2 succeeded at 53 (offset 1 line).
Hunk #3 succeeded at 135 (offset 1 line).
1 out of 3 hunks FAILED -- saving rejects to file arch/ia64/mm/fault.c.rej
patching file arch/ia64/mm/init.c
patching file arch/mips/kernel/binfmt_elfn32.c
patching file arch/mips/kernel/binfmt_elfo32.c
patching file arch/mips/kernel/syscall.c
Hunk #1 succeeded at 90 (offset 1 line).
Hunk #2 succeeded at 105 (offset 1 line).
patching file arch/mips/mm/fault.c
patching file arch/parisc/kernel/module.c
Hunk #2 succeeded at 317 (offset 6 lines).
Hunk #3 succeeded at 351 (offset 6 lines).
Hunk #4 succeeded at 369 (offset 6 lines).
Hunk #5 succeeded at 387 (offset 6 lines).
Hunk #6 succeeded at 407 (offset 12 lines).
Hunk #7 succeeded at 780 (offset 37 lines).
patching file arch/parisc/kernel/ptrace.c
patching file arch/parisc/kernel/sys_parisc.c
patching file arch/parisc/kernel/traps.c
Hunk #1 succeeded at 707 (offset -4 lines).
patching file arch/parisc/mm/fault.c
patching file arch/powerpc/kernel/module_32.c
patching file arch/powerpc/mm/fault.c
patching file arch/powerpc/mm/mmap.c
patching file arch/ppc/mm/fault.c
patching file arch/s390/kernel/module.c
patching file arch/sparc/kernel/ptrace.c
Hunk #1 FAILED at 19.
Hunk #2 succeeded at 306 with fuzz 1 (offset 5 lines).
1 out of 2 hunks FAILED -- saving rejects to file arch/sparc/kernel/ptrace.c.rej
patching file arch/sparc/kernel/sys_sparc.c
Hunk #1 succeeded at 57 (offset 1 line).
patching file arch/sparc/Makefile
patching file arch/sparc/mm/fault.c
patching file arch/sparc/mm/init.c
patching file arch/sparc/mm/srmmu.c
patching file arch/sparc64/kernel/ptrace.c
Hunk #1 FAILED at 22.
Hunk #2 succeeded at 219 with fuzz 1 (offset 5 lines).
1 out of 2 hunks FAILED -- saving rejects to file arch/sparc64/kernel/ptrace.c.rej
patching file arch/sparc64/kernel/sys_sparc.c
patching file arch/sparc64/mm/fault.c
patching file arch/v850/kernel/module.c
patching file arch/x86_64/boot/compressed/head.S
patching file arch/x86_64/ia32/ia32_binfmt.c
patching file arch/x86_64/ia32/mmap32.c
patching file arch/x86_64/kernel/process.c
Hunk #1 succeeded at 860 (offset 30 lines).
patching file arch/x86_64/kernel/ptrace.c
patching file arch/x86_64/kernel/setup64.c
patching file arch/x86_64/kernel/sys_x86_64.c
Hunk #1 succeeded at 66 (offset 1 line).
Hunk #2 succeeded at 80 (offset 1 line).
Hunk #3 succeeded at 94 (offset 1 line).
patching file arch/x86_64/mm/fault.c
patching file arch/x86_64/mm/mmap.c
patching file Documentation/dontdiff
patching file drivers/char/agp/frontend.c
patching file drivers/char/keyboard.c
Hunk #1 succeeded at 643 (offset 25 lines).
patching file drivers/char/mem.c
Hunk #3 succeeded at 198 (offset 18 lines).
Hunk #4 succeeded at 281 (offset 20 lines).
Hunk #5 FAILED at 513.
Hunk #6 succeeded at 541 (offset -97 lines).
Hunk #7 succeeded at 706 (offset -97 lines).
Hunk #8 succeeded at 723 (offset -97 lines).
Hunk #9 succeeded at 844 (offset -98 lines).
Hunk #10 succeeded at 880 (offset -99 lines).
1 out of 10 hunks FAILED -- saving rejects to file drivers/char/mem.c.rej
patching file drivers/char/random.c
patching file drivers/char/vt_ioctl.c
patching file drivers/ieee1394/hosts.c
Hunk #1 succeeded at 76 (offset 1 line).
patching file drivers/ieee1394/ohci1394.c
Hunk #1 FAILED at 162.
1 out of 1 hunk FAILED -- saving rejects to file drivers/ieee1394/ohci1394.c.rej
patching file drivers/mtd/devices/doc2001.c
patching file drivers/net/pcnet32.c
patching file drivers/pci/proc.c
patching file drivers/pnp/pnpbios/bioscalls.c
patching file drivers/video/i810/i810_main.c
patching file drivers/video/vesafb.c
Hunk #1 succeeded at 286 (offset 27 lines).
patching file fs/binfmt_aout.c
Hunk #1 FAILED at 24.
Hunk #2 succeeded at 125 (offset 1 line).
Hunk #3 succeeded at 138 (offset 1 line).
Hunk #4 succeeded at 293 (offset 1 line).
Hunk #5 succeeded at 327 (offset 1 line).
Hunk #6 succeeded at 444 (offset 1 line).
1 out of 6 hunks FAILED -- saving rejects to file fs/binfmt_aout.c.rej
patching file fs/binfmt_elf.c
Hunk #1 FAILED at 38.
Hunk #2 succeeded at 96 (offset 1 line).
Hunk #3 succeeded at 108 (offset 1 line).
Hunk #4 succeeded at 324 (offset 1 line).
Hunk #5 FAILED at 365.
Hunk #6 succeeded at 475 (offset 1 line).
Hunk #7 succeeded at 519 (offset 1 line).
Hunk #8 succeeded at 729 (offset 1 line).
Hunk #9 succeeded at 747 (offset 1 line).
Hunk #10 succeeded at 973 (offset 1 line).
Hunk #11 succeeded at 1126 (offset 1 line).
Hunk #12 FAILED at 1162.
Hunk #13 succeeded at 1191 (offset 1 line).
Hunk #14 FAILED at 1225.
4 out of 20 hunks FAILED -- saving rejects to file fs/binfmt_elf.c.rej
patching file fs/binfmt_flat.c
patching file fs/binfmt_misc.c
Hunk #1 succeeded at 113 (offset 1 line).
patching file fs/buffer.c
patching file fs/compat.c
Hunk #2 succeeded at 1503 (offset 4 lines).
Hunk #3 succeeded at 1525 (offset 4 lines).
Hunk #4 succeeded at 1572 (offset 4 lines).
Hunk #5 succeeded at 1612 (offset 4 lines).
patching file fs/dcache.c
Reversed (or previously applied) patch detected! Assuming -R.
patching file fs/exec.c
Hunk #1 FAILED at 49.
Hunk #2 succeeded at 77 (offset 8 lines).
Hunk #3 succeeded at 331 (offset 8 lines).
Hunk #4 succeeded at 344 (offset 8 lines).
Hunk #5 succeeded at 381 (offset 8 lines).
Hunk #6 succeeded at 443 (offset 8 lines).
Hunk #7 FAILED at 477.
Hunk #8 succeeded at 529 (offset 9 lines).
Hunk #9 succeeded at 1240 (offset 9 lines).
Hunk #10 succeeded at 1256 (offset 9 lines).
Hunk #11 succeeded at 1320 (offset 9 lines).
Hunk #12 succeeded at 1361 (offset 9 lines).
Hunk #13 succeeded at 1529 (offset 9 lines).
Hunk #14 FAILED at 1754.
3 out of 14 hunks FAILED -- saving rejects to file fs/exec.c.rej
patching file fs/fcntl.c
Hunk #1 FAILED at 18.
Hunk #2 succeeded at 65 (offset 1 line).
Hunk #3 succeeded at 86 with fuzz 1 (offset 1 line).
Hunk #4 succeeded at 148 (offset 4 lines).
Hunk #5 succeeded at 439 (offset 7 lines).
1 out of 5 hunks FAILED -- saving rejects to file fs/fcntl.c.rej
patching file fs/Kconfig
Hunk #1 succeeded at 814 (offset 20 lines).
patching file fs/namei.c
Hunk #1 FAILED at 32.
Hunk #2 succeeded at 635 (offset 23 lines).
Hunk #3 succeeded at 1004 (offset 42 lines).
Hunk #4 succeeded at 1660 (offset 44 lines).
Hunk #5 succeeded at 1711 (offset 44 lines).
Hunk #6 succeeded at 1735 (offset 44 lines).
Hunk #7 succeeded at 1805 (offset 44 lines).
Hunk #8 succeeded at 1939 (offset 45 lines).
Hunk #9 succeeded at 1973 (offset 46 lines).
Hunk #10 FAILED at 2031.
Hunk #11 succeeded at 2130 (offset 49 lines).
Hunk #12 FAILED at 2156.
Hunk #13 succeeded at 2230 (offset 50 lines).
Hunk #14 FAILED at 2247.
Hunk #15 FAILED at 2344.
Hunk #16 FAILED at 2444.
Hunk #17 succeeded at 2690 (offset 57 lines).
6 out of 17 hunks FAILED -- saving rejects to file fs/namei.c.rej
patching file fs/namespace.c
Hunk #1 FAILED at 23.
Hunk #2 succeeded at 670 (offset 68 lines).
Hunk #3 succeeded at 692 (offset 68 lines).
Hunk #4 succeeded at 1517 with fuzz 1 (offset 164 lines).
Hunk #5 succeeded at 1536 (offset 164 lines).
Hunk #6 succeeded at 1791 (offset 164 lines).
1 out of 6 hunks FAILED -- saving rejects to file fs/namespace.c.rej
patching file fs/open.c
Hunk #2 succeeded at 210 (offset 2 lines).
Hunk #3 succeeded at 413 (offset 2 lines).
Hunk #4 succeeded at 472 (offset 2 lines).
Hunk #5 succeeded at 545 with fuzz 1 (offset 3 lines).
Hunk #6 succeeded at 577 (offset 3 lines).
Hunk #7 succeeded at 609 (offset 3 lines).
Hunk #8 succeeded at 641 (offset 3 lines).
Hunk #9 succeeded at 681 (offset 3 lines).
Hunk #10 succeeded at 729 (offset 3 lines).
Hunk #11 FAILED at 760.
Hunk #12 succeeded at 778 (offset 4 lines).
Hunk #13 FAILED at 809.
Hunk #14 FAILED at 828.
Hunk #15 FAILED at 842.
Hunk #16 succeeded at 859 (offset 4 lines).
Hunk #17 succeeded at 1067 (offset 4 lines).
4 out of 17 hunks FAILED -- saving rejects to file fs/open.c.rej
patching file fs/pipe.c
patching file fs/proc/array.c
Hunk #1 succeeded at 303 (offset 10 lines).
Hunk #2 succeeded at 382 (offset 56 lines).
Hunk #3 succeeded at 484 (offset 60 lines).
Hunk #4 succeeded at 536 (offset 60 lines).
Hunk #5 succeeded at 590 (offset 60 lines).
patching file fs/proc/base.c
Hunk #1 FAILED at 72.
Hunk #2 succeeded at 130 (offset 4 lines).
Hunk #3 succeeded at 214 (offset 6 lines).
Hunk #4 succeeded at 427 (offset 10 lines).
Hunk #5 succeeded at 608 (offset 10 lines).
Hunk #6 FAILED at 1429.
Hunk #7 succeeded at 1475 (offset 25 lines).
Hunk #8 succeeded at 1813 (offset 29 lines).
Hunk #9 succeeded at 2168 with fuzz 2 (offset 65 lines).
Hunk #10 FAILED at 2191.
Hunk #11 succeeded at 2295 (offset 69 lines).
Hunk #12 succeeded at 2322 with fuzz 2 (offset 73 lines).
3 out of 12 hunks FAILED -- saving rejects to file fs/proc/base.c.rej
patching file fs/proc/inode.c
Hunk #1 succeeded at 169 with fuzz 2.
patching file fs/proc/internal.h
patching file fs/proc/proc_misc.c
Hunk #1 succeeded at 685 (offset 34 lines).
Hunk #2 succeeded at 702 with fuzz 1 (offset 34 lines).
Hunk #3 succeeded at 715 (offset 37 lines).
Hunk #4 succeeded at 759 (offset 37 lines).
patching file fs/proc/root.c
Hunk #1 succeeded at 56 (offset 3 lines).
Hunk #2 FAILED at 86.
1 out of 2 hunks FAILED -- saving rejects to file fs/proc/root.c.rej
patching file fs/proc/task_mmu.c
patching file fs/readdir.c
patching file fs/xfs/linux-2.6/xfs_file.c
patching file grsecurity/gracl_alloc.c
patching file grsecurity/gracl.c
patching file grsecurity/gracl_cap.c
patching file grsecurity/gracl_fs.c
patching file grsecurity/gracl_ip.c
patching file grsecurity/gracl_learn.c
patching file grsecurity/gracl_res.c
patching file grsecurity/gracl_segv.c
patching file grsecurity/gracl_shm.c
patching file grsecurity/grsec_chdir.c
patching file grsecurity/grsec_chroot.c
patching file grsecurity/grsec_disabled.c
patching file grsecurity/grsec_exec.c
patching file grsecurity/grsec_fifo.c
patching file grsecurity/grsec_fork.c
patching file grsecurity/grsec_init.c
patching file grsecurity/grsec_ipc.c
patching file grsecurity/grsec_link.c
patching file grsecurity/grsec_log.c
patching file grsecurity/grsec_mem.c
patching file grsecurity/grsec_mount.c
patching file grsecurity/grsec_rand.c
patching file grsecurity/grsec_sig.c
patching file grsecurity/grsec_sock.c
patching file grsecurity/grsec_sysctl.c
patching file grsecurity/grsec_textrel.c
patching file grsecurity/grsec_time.c
patching file grsecurity/grsec_tpe.c
patching file grsecurity/grsum.c
patching file grsecurity/Kconfig
patching file grsecurity/Makefile
patching file include/asm-alpha/a.out.h
patching file include/asm-alpha/elf.h
patching file include/asm-alpha/kmap_types.h
Hunk #1 succeeded at 24 (offset -1 lines).
patching file include/asm-alpha/page.h
Hunk #1 succeeded at 92 (offset -1 lines).
patching file include/asm-alpha/pgtable.h
Hunk #1 succeeded at 101 (offset -1 lines).
patching file include/asm-arm/a.out.h
patching file include/asm-arm/elf.h
Hunk #1 succeeded at 55 (offset -1 lines).
patching file include/asm-arm/kmap_types.h
patching file include/asm-arm26/kmap_types.h
patching file include/asm-cris/kmap_types.h
patching file include/asm-frv/kmap_types.h
patching file include/asm-h8300/kmap_types.h
patching file include/asm-i386/alternative.h
Hunk #1 succeeded at 49 (offset 2 lines).
Hunk #2 succeeded at 73 (offset 2 lines).
Hunk #3 succeeded at 112 (offset 2 lines).
patching file include/asm-i386/a.out.h
patching file include/asm-i386/auxvec.h
patching file include/asm-i386/bug.h
Hunk #1 succeeded at 11 (offset -1 lines).
patching file include/asm-i386/checksum.h
patching file include/asm-i386/desc.h
patching file include/asm-i386/elf.h
Hunk #1 FAILED at 71.
1 out of 3 hunks FAILED -- saving rejects to file include/asm-i386/elf.h.rej
patching file include/asm-i386/i387.h
patching file include/asm-i386/kmap_types.h
Hunk #1 succeeded at 22 (offset -1 lines).
patching file include/asm-i386/mach-default/apm.h
patching file include/asm-i386/mach-default/do_timer.h
patching file include/asm-i386/mach-visws/do_timer.h
patching file include/asm-i386/mach-voyager/do_timer.h
patching file include/asm-i386/mman.h
patching file include/asm-i386/mmu_context.h
Hunk #1 succeeded at 45 (offset -1 lines).
Hunk #2 succeeded at 69 (offset -1 lines).
patching file include/asm-i386/mmu.h
patching file include/asm-i386/module.h
patching file include/asm-i386/page.h
Hunk #1 succeeded at 51 (offset -1 lines).
Hunk #2 succeeded at 73 (offset -1 lines).
Hunk #3 succeeded at 122 with fuzz 1 (offset 4 lines).
Hunk #4 succeeded at 155 with fuzz 2 (offset 9 lines).
patching file include/asm-i386/pgalloc.h
Hunk #1 succeeded at 2 with fuzz 2 (offset -1 lines).
patching file include/asm-i386/pgtable.h
Hunk #1 succeeded at 33 (offset -1 lines).
Hunk #2 succeeded at 57 (offset -1 lines).
Hunk #3 succeeded at 71 (offset -1 lines).
Hunk #4 succeeded at 146 (offset -1 lines).
Hunk #5 succeeded at 190 (offset -1 lines).
Hunk #6 succeeded at 445 (offset -1 lines).
patching file include/asm-i386/processor.h
Hunk #1 succeeded at 18 with fuzz 2 (offset -1 lines).
Hunk #2 succeeded at 92 (offset -1 lines).
Hunk #3 FAILED at 321.
Hunk #4 succeeded at 454 (offset 4 lines).
Hunk #5 succeeded at 485 (offset 4 lines).
Hunk #6 succeeded at 498 (offset 4 lines).
Hunk #7 succeeded at 574 (offset 4 lines).
Hunk #8 succeeded at 589 (offset 4 lines).
1 out of 8 hunks FAILED -- saving rejects to file include/asm-i386/processor.h.rej
patching file include/asm-i386/ptrace.h
patching file include/asm-i386/system.h
Hunk #1 FAILED at 5.
Hunk #2 succeeded at 157 (offset 5 lines).
Hunk #3 succeeded at 502 (offset 5 lines).
1 out of 3 hunks FAILED -- saving rejects to file include/asm-i386/system.h.rej
patching file include/asm-i386/uaccess.h
Hunk #1 succeeded at 9 (offset -1 lines).
Hunk #2 succeeded at 31 (offset -1 lines).
Hunk #3 succeeded at 283 (offset -1 lines).
Hunk #4 succeeded at 299 (offset -1 lines).
Hunk #5 succeeded at 339 (offset -1 lines).
Hunk #6 succeeded at 353 (offset -1 lines).
Hunk #7 succeeded at 382 (offset -1 lines).
Hunk #8 succeeded at 397 (offset -1 lines).
patching file include/asm-ia64/elf.h
Hunk #1 succeeded at 162 (offset -1 lines).
patching file include/asm-ia64/kmap_types.h
Hunk #1 succeeded at 22 (offset -1 lines).
patching file include/asm-ia64/page.h
Hunk #1 succeeded at 230 with fuzz 2 (offset 1 line).
patching file include/asm-ia64/pgtable.h
Hunk #1 succeeded at 143 (offset -1 lines).
patching file include/asm-ia64/processor.h
Hunk #1 succeeded at 283 (offset -1 lines).
patching file include/asm-ia64/ustack.h
patching file include/asm-m32r/kmap_types.h
Hunk #1 succeeded at 24 (offset -1 lines).
patching file include/asm-m68k/kmap_types.h
patching file include/asm-m68knommu/kmap_types.h
patching file include/asm-mips/a.out.h
Hunk #1 succeeded at 35 (offset -1 lines).
patching file include/asm-mips/elf.h
Hunk #1 succeeded at 371 (offset -1 lines).
patching file include/asm-mips/kmap_types.h
Hunk #1 succeeded at 22 (offset -1 lines).
patching file include/asm-mips/page.h
Hunk #1 succeeded at 78 (offset -1 lines).
Hunk #2 succeeded at 152 (offset -1 lines).
patching file include/asm-parisc/a.out.h
patching file include/asm-parisc/elf.h
patching file include/asm-parisc/kmap_types.h
Hunk #1 succeeded at 22 (offset -1 lines).
patching file include/asm-parisc/page.h
Hunk #1 succeeded at 190 with fuzz 2 (offset 1 line).
patching file include/asm-parisc/pgtable.h
Hunk #1 succeeded at 219 (offset -1 lines).
patching file include/asm-powerpc/a.out.h
patching file include/asm-powerpc/elf.h
Hunk #1 succeeded at 161 with fuzz 2 (offset -15 lines).
patching file include/asm-powerpc/kmap_types.h
patching file include/asm-powerpc/page_64.h
patching file include/asm-ppc/page.h
Hunk #1 succeeded at 173 (offset -2 lines).
patching file include/asm-ppc/pgtable.h
Hunk #1 succeeded at 440 (offset -1 lines).
Hunk #2 succeeded at 466 (offset -1 lines).
patching file include/asm-s390/kmap_types.h
patching file include/asm-sh/kmap_types.h
Hunk #1 succeeded at 24 (offset -1 lines).
patching file include/asm-sparc/a.out.h
patching file include/asm-sparc/elf.h
Hunk #1 succeeded at 144 (offset -1 lines).
patching file include/asm-sparc/kmap_types.h
patching file include/asm-sparc/page.h
Hunk #1 succeeded at 165 with fuzz 2 (offset 4 lines).
patching file include/asm-sparc/pgtable.h
Hunk #1 succeeded at 49 (offset -1 lines).
Hunk #2 succeeded at 77 (offset -1 lines).
patching file include/asm-sparc/pgtsrmmu.h
patching file include/asm-sparc/uaccess.h
patching file include/asm-sparc64/a.out.h
patching file include/asm-sparc64/elf.h
patching file include/asm-sparc64/kmap_types.h
patching file include/asm-sparc64/page.h
Hunk #1 succeeded at 143 with fuzz 2 (offset 1 line).
patching file include/asm-v850/kmap_types.h
patching file include/asm-x86_64/a.out.h
patching file include/asm-x86_64/elf.h
patching file include/asm-x86_64/ia32.h
Hunk #1 succeeded at 156 (offset -1 lines).
patching file include/asm-x86_64/kmap_types.h
patching file include/asm-x86_64/page.h
Hunk #1 succeeded at 133 with fuzz 1 (offset -1 lines).
patching file include/asm-x86_64/pgalloc.h
patching file include/asm-x86_64/pgtable.h
patching file include/asm-x86_64/system.h
Hunk #1 FAILED at 366.
1 out of 1 hunk FAILED -- saving rejects to file include/asm-x86_64/system.h.rej
patching file include/asm-xtensa/kmap_types.h
patching file include/linux/a.out.h
patching file include/linux/binfmts.h
patching file include/linux/capability.h
Hunk #1 succeeded at 364 (offset 6 lines).
patching file include/linux/elf.h
Hunk #1 succeeded at 6 with fuzz 1 (offset 1 line).
Hunk #2 succeeded at 51 (offset 1 line).
Hunk #3 succeeded at 95 (offset -57 lines).
Hunk #4 succeeded at 226 (offset -57 lines).
Hunk #5 succeeded at 331 (offset -57 lines).
Hunk #6 succeeded at 389 (offset -57 lines).
Hunk #7 succeeded at 397 (offset -57 lines).
patching file include/linux/gracl.h
patching file include/linux/gralloc.h
patching file include/linux/grdefs.h
patching file include/linux/grinternal.h
patching file include/linux/grmsg.h
patching file include/linux/grsecurity.h
patching file include/linux/highmem.h
Hunk #1 succeeded at 69 (offset -1 lines).
patching file include/linux/mman.h
Hunk #1 succeeded at 61 (offset 2 lines).
patching file include/linux/mm.h
Hunk #1 succeeded at 37 (offset -1 lines).
Hunk #2 succeeded at 111 (offset -1 lines).
Hunk #3 succeeded at 202 (offset -1 lines).
Hunk #4 succeeded at 1105 (offset -1 lines).
patching file include/linux/module.h
Hunk #1 succeeded at 272 (offset -1 lines).
patching file include/linux/moduleloader.h
patching file include/linux/random.h
patching file include/linux/sched.h
Hunk #1 succeeded at 84 with fuzz 1 (offset 44 lines).
Hunk #2 succeeded at 357 (offset 6 lines).
Hunk #3 succeeded at 482 (offset 6 lines).
Hunk #4 succeeded at 932 (offset 15 lines).
Hunk #5 succeeded at 1461 (offset 21 lines).
patching file include/linux/shm.h
patching file include/linux/sysctl.h
Hunk #1 FAILED at 148.
1 out of 1 hunk FAILED -- saving rejects to file include/linux/sysctl.h.rej
patching file init/Kconfig
Hunk #1 succeeded at 277 (offset 9 lines).
patching file init/main.c
Hunk #3 succeeded at 703 (offset 1 line).
patching file ipc/msg.c
Hunk #2 succeeded at 239 (offset 1 line).
Hunk #3 succeeded at 500 (offset 1 line).
patching file ipc/sem.c
Hunk #2 succeeded at 249 (offset 1 line).
Hunk #3 succeeded at 845 (offset 1 line).
patching file ipc/shm.c
Hunk #3 succeeded at 164 (offset 6 lines).
Hunk #4 succeeded at 277 (offset 9 lines).
Hunk #5 succeeded at 335 (offset 10 lines).
Hunk #6 succeeded at 650 (offset 10 lines).
Hunk #7 succeeded at 800 (offset 10 lines).
Hunk #8 succeeded at 993 (offset 13 lines).
patching file kernel/capability.c
Hunk #1 FAILED at 12.
Hunk #2 succeeded at 236 (offset 1 line).
Hunk #3 succeeded at 262 (offset 1 line).
1 out of 3 hunks FAILED -- saving rejects to file kernel/capability.c.rej
patching file kernel/configs.c
patching file kernel/exit.c
Hunk #6 succeeded at 935 (offset 2 lines).
patching file kernel/fork.c
Hunk #1 FAILED at 44.
Hunk #2 succeeded at 205 with fuzz 2 (offset 6 lines).
Hunk #3 succeeded at 331 (offset 6 lines).
Hunk #4 FAILED at 963.
Hunk #5 succeeded at 1102 (offset 32 lines).
Hunk #6 succeeded at 1308 (offset 47 lines).
Hunk #7 succeeded at 1383 (offset 47 lines).
2 out of 7 hunks FAILED -- saving rejects to file kernel/fork.c.rej
patching file kernel/futex.c
patching file kernel/kallsyms.c
patching file kernel/kprobes.c
patching file kernel/module.c
patching file kernel/pid.c
patching file kernel/posix-cpu-timers.c
Hunk #1 FAILED at 6.
Hunk #2 succeeded at 1127 (offset 1 line).
1 out of 2 hunks FAILED -- saving rejects to file kernel/posix-cpu-timers.c.rej
patching file kernel/printk.c
Hunk #1 FAILED at 31.
Hunk #2 succeeded at 187 with fuzz 2 (offset 1 line).
1 out of 2 hunks FAILED -- saving rejects to file kernel/printk.c.rej
patching file kernel/ptrace.c
Hunk #1 FAILED at 18.
Hunk #2 succeeded at 129 (offset 1 line).
Hunk #3 succeeded at 521 (offset 5 lines).
1 out of 3 hunks FAILED -- saving rejects to file kernel/ptrace.c.rej
patching file kernel/resource.c
patching file kernel/sched.c
Hunk #2 FAILED at 3566.
1 out of 2 hunks FAILED -- saving rejects to file kernel/sched.c.rej
patching file kernel/signal.c
Hunk #1 FAILED at 25.
Hunk #2 FAILED at 578.
Hunk #3 succeeded at 777 (offset 10 lines).
Hunk #4 succeeded at 822 (offset 10 lines).
2 out of 4 hunks FAILED -- saving rejects to file kernel/signal.c.rej
patching file kernel/sys.c
Hunk #1 FAILED at 30.
Hunk #2 succeeded at 448 with fuzz 1 (offset 5 lines).
Hunk #3 succeeded at 851 (offset 13 lines).
Hunk #4 succeeded at 883 (offset 13 lines).
Hunk #5 succeeded at 927 (offset 13 lines).
Hunk #6 succeeded at 1033 (offset 13 lines).
Hunk #7 succeeded at 1141 (offset 13 lines).
1 out of 7 hunks FAILED -- saving rejects to file kernel/sys.c.rej
patching file kernel/sysctl.c
Hunk #1 succeeded at 55 (offset 1 line).
Hunk #2 succeeded at 169 (offset 4 lines).
Hunk #3 succeeded at 733 (offset 26 lines).
Hunk #4 succeeded at 1248 (offset 26 lines).
Hunk #5 succeeded at 1288 (offset 26 lines).
patching file kernel/time.c
patching file localversion-grsec
patching file Makefile
Hunk #1 succeeded at 527 (offset 9 lines).
patching file mm/filemap.c
Hunk #2 succeeded at 1652 (offset 1 line).
Hunk #3 succeeded at 1880 (offset 1 line).
patching file mm/madvise.c
patching file mm/memory.c
Hunk #7 succeeded at 2060 (offset 4 lines).
Hunk #8 succeeded at 2130 (offset 6 lines).
Hunk #9 succeeded at 2264 (offset 9 lines).
Hunk #10 succeeded at 2379 (offset 9 lines).
Hunk #11 succeeded at 2407 (offset 9 lines).
patching file mm/mempolicy.c
patching file mm/mlock.c
Hunk #1 FAILED at 10.
Hunk #2 succeeded at 102 (offset 1 line).
Hunk #3 FAILED at 113.
Hunk #4 succeeded at 134 (offset 1 line).
Hunk #5 succeeded at 204 with fuzz 1 (offset 3 lines).
Hunk #6 succeeded at 238 (offset 4 lines).
Hunk #7 FAILED at 277.
3 out of 7 hunks FAILED -- saving rejects to file mm/mlock.c.rej
patching file mm/mmap.c
Hunk #15 succeeded at 1242 with fuzz 2.
Hunk #31 succeeded at 2116 with fuzz 1.
Hunk #32 succeeded at 2132 (offset 2 lines).
Hunk #33 succeeded at 2170 with fuzz 1 (offset 3 lines).
Hunk #34 succeeded at 2185 with fuzz 1 (offset 3 lines).
Hunk #35 succeeded at 2324 with fuzz 1 (offset 9 lines).
patching file mm/mprotect.c
patching file mm/mremap.c
Hunk #1 succeeded at 107 (offset 1 line).
Hunk #2 succeeded at 260 (offset 1 line).
Hunk #3 succeeded at 279 (offset 1 line).
Hunk #4 succeeded at 295 (offset 1 line).
Hunk #5 succeeded at 335 (offset 1 line).
Hunk #6 succeeded at 379 (offset 4 lines).
Hunk #7 succeeded at 397 (offset 4 lines).
Hunk #8 succeeded at 408 (offset 4 lines).
Hunk #9 succeeded at 419 (offset 4 lines).
patching file mm/page_alloc.c
Hunk #1 succeeded at 335 (offset 1 line).
Hunk #2 succeeded at 346 (offset 1 line).
patching file mm/rmap.c
Hunk #1 succeeded at 107 (offset 1 line).
patching file mm/shmem.c
Hunk #1 succeeded at 2244 (offset -1 lines).
patching file mm/slab.c
patching file mm/tiny-shmem.c
patching file mm/vmalloc.c
patching file net/ipv4/inet_connection_sock.c
patching file net/ipv4/inet_hashtables.c
Hunk #2 succeeded at 312 (offset -1 lines).
patching file net/ipv4/netfilter/ipt_stealth.c
patching file net/ipv4/netfilter/Kconfig
patching file net/ipv4/netfilter/Makefile
patching file net/ipv4/tcp_ipv4.c
patching file net/ipv4/udp.c
Hunk #3 succeeded at 277 (offset 4 lines).
Hunk #4 succeeded at 553 (offset 5 lines).
Hunk #5 succeeded at 825 (offset 14 lines).
patching file net/socket.c
Hunk #2 succeeded at 97 with fuzz 2 (offset 1 line).
Hunk #3 succeeded at 358 (offset 1 line).
Hunk #4 succeeded at 1285 (offset 29 lines).
Hunk #5 succeeded at 1393 (offset 32 lines).
Hunk #6 succeeded at 1435 (offset 32 lines).
Hunk #7 succeeded at 1482 (offset 32 lines).
Hunk #8 succeeded at 1530 (offset 32 lines).
Hunk #9 succeeded at 1559 (offset 32 lines).
Hunk #10 succeeded at 1569 (offset 32 lines).
Hunk #11 succeeded at 1830 (offset 32 lines).
patching file net/unix/af_unix.c
Hunk #1 FAILED at 117.
Hunk #2 succeeded at 686 (offset 5 lines).
Hunk #3 succeeded at 714 (offset 5 lines).
Hunk #4 FAILED at 799.
Hunk #5 succeeded at 828 (offset 5 lines).
2 out of 5 hunks FAILED -- saving rejects to file net/unix/af_unix.c.rej
patching file security/commoncap.c
Hunk #5 succeeded at 336 (offset 1 line).
patching file security/dummy.c
patching file security/Kconfig


Kernel compile log from make-kpkg follows:

exec make -f /usr/share/kernel-package/ruleset/minimal.mk debian APPEND_TO_VERSION=070211v1 INITRD=YES
====== making target minimal_debian [new prereqs: ]======
This is kernel package version .
test -d debian || mkdir debian
test ! -e stamp-building || rm -f stamp-building
test -f debian/control || sed -e 's/=V/2.6.17.14-ubuntu1070211v1-grsec-custom.amd64/g' \
-e 's/=D/2.6.17.14-ubuntu1070211v1-grsec-custom.amd64-10.00.Custom/g' -e 's/=A/amd64/g' \
-e 's/=SA//g' -e 's/=L/ /g' \
-e 's/=I//g' \
-e 's/=CV/2.6/g' \
-e 's/=M/Unknown Kernel Package Maintainer <unknown@unconfigured.in.etc.kernel-pkg.conf>/g' \
-e 's/=ST/linux/g' -e 's/=B/x86_64/g' \
/usr/share/kernel-package/Control > debian/control
test -f debian/changelog || sed -e 's/=V/2.6.17.14-ubuntu1070211v1-grsec-custom.amd64/g' \
-e 's/=D/2.6.17.14-ubuntu1070211v1-grsec-custom.amd64-10.00.Custom/g' -e 's/=A/amd64/g' \
-e 's/=ST/linux/g' -e 's/=B/x86_64/g' \
-e 's/=M/Unknown Kernel Package Maintainer <unknown@unconfigured.in.etc.kernel-pkg.conf>/g' \
/usr/share/kernel-package/changelog > debian/changelog
install -p -m 755 /usr/share/kernel-package/rules debian/rules
for file in ChangeLog Control Control.bin86 config templates.in rules; do \
cp -f /usr/share/kernel-package/$file ./debian/; \
done
for dir in Config docs examples ruleset scripts pkg po; do \
cp -af /usr/share/kernel-package/$dir ./debian/; \
done
test -d ./debian/stamps || mkdir debian/stamps
exec debian/rules APPEND_TO_VERSION=070211v1 INITRD=YES kernel_image kernel_headers modules_image

====== making target CONFIG-common [new prereqs: testdir]======

====== making target debian/stamp-conf [new prereqs: ]======
# work around idiocy in recent kernel versions
test ! -e scripts/package/builddeb || \
mv -f scripts/package/builddeb scripts/package/builddeb.dist
test ! -e scripts/package/Makefile || \
(mv -f scripts/package/Makefile scripts/package/Makefile.dist && \
(echo "# Dummy file "; echo "help:") > scripts/package/Makefile)
test -d debian || mkdir ./debian
test ! -e stamp-building || rm -f stamp-building
test ! -f ./debian || test -f stamp-debian || test -f debian/official || \
(rm -rf ./debian && mkdir ./debian)
test -f stamp-debian || \
( test -f debian/official && test -f debian/control) || \
sed -e 's/=V/2.6.17.14-ubuntu1070211v1-grsec-custom.amd64/g' -e 's/=D/2.6.17.14-ubuntu1070211v1-grsec-custom.amd64-10.00.Custom/g' \
-e 's/=A/amd64/g' -e 's/=SA//g' \
-e 's/=L/lilo (>= 19.1) | grub, /g' -e 's/=I/yaird (>= 0.0.11-8) | initramfs-tools (>= 0.53) | linux-initramfs-tool, /g' \
-e 's/=CV/2.6/g' \
-e 's/=M/Unknown Kernel Package Maintainer <unknown@unconfigured.in.etc.kernel-pkg.conf>/g' \
-e 's/=ST/linux/g' -e 's/=B/x86_64/g' \
/usr/share/kernel-package/Control> debian/control
test -f stamp-debian || test -f debian/official || \
sed -e 's/=V/2.6.17.14-ubuntu1070211v1-grsec-custom.amd64/g' -e 's/=D/2.6.17.14-ubuntu1070211v1-grsec-custom.amd64-10.00.Custom/g' \
-e 's/=A/amd64/g' -e 's/=M/Unknown Kernel Package Maintainer <unknown@unconfigured.in.etc.kernel-pkg.conf>/g' \
-e 's/=ST/linux/g' -e 's/=B/x86_64/g' \
/usr/share/kernel-package/changelog > debian/changelog
test -f debian/rules || install -p -m 755 /usr/share/kernel-package/rules debian/rules
test -f stamp-debian || test -f debian/official || \
for file in ChangeLog Control Control.bin86 config templates.in rules; do \
cp -f /usr/share/kernel-package/$file ./debian/; \
done
test -f stamp-debian || test -f debian/official || \
for dir in Config docs examples ruleset scripts pkg po; do \
cp -af /usr/share/kernel-package/$dir ./debian/; \
done
echo done > stamp-debian
echo done > debian/stamp-conf
====== making target CONFIG-common [new prereqs: stamp-conf]======
This is kernel package version 10.049ubuntu5.
====== making target stamp-arch-conf [new prereqs: CONFIG-common]======

====== making target CONFIG-arch [new prereqs: stamp-arch-conf]======
====== making target conf.vars [new prereqs: Makefile .config]======

====== making target CONFIG-arch [new prereqs: .config conf.vars]======
This is kernel package version 10.049ubuntu5.
====== making target CONFIG/linux-headers-2.6.17.14-ubuntu1070211v1-grsec-custom.amd64 [new prereqs: CONFIG-arch]======

====== making target CONFIG/linux-image-2.6.17.14-ubuntu1070211v1-grsec-custom.amd64 [new prereqs: CONFIG-arch]======

====== making target CONFIG/linux-uml-2.6.17.14-ubuntu1070211v1-grsec-custom.amd64 [new prereqs: CONFIG-arch]======

====== making target CONFIG/linux-image-xen0-2.6.17.14-ubuntu1070211v1-grsec-custom.amd64 [new prereqs: CONFIG-arch]======

====== making target CONFIG/linux-image-xenu-2.6.17.14-ubuntu1070211v1-grsec-custom.amd64 [new prereqs: CONFIG-arch]======

====== making target CONFIG/linux-image-kdump [new prereqs: CONFIG-arch]======

====== making target stamp-configure-arch [new prereqs: linux-headers-2.6.17.14-ubuntu1070211v1-grsec-custom.amd64 linux-image-2.6.17.14-ubuntu1070211v1-grsec-custom.amd64 linux-uml-2.6.17.14-ubuntu1070211v1-grsec-custom.amd64 linux-image-xen0-2.6.17.14-ubuntu1070211v1-grsec-custom.amd64 linux-image-xenu-2.6.17.14-ubuntu1070211v1-grsec-custom.amd64 linux-image-kdump]======
====== making target configure-arch [new prereqs: stamp-configure-arch]======
====== making target stamp-indep-conf [new prereqs: CONFIG-common]======

====== making target CONFIG-indep [new prereqs: stamp-indep-conf]======
====== making target debian/stamp-kernel-conf [new prereqs: .config Makefile]======
/usr/bin/make EXTRAVERSION=.14-ubuntu1070211v1 ARCH=x86_64 \
oldconfig
make[1]: Entering directory `/usrsrc/usr/src/linux-source-2.6.17.11-vs202rc18-grsec219'
HOSTCC scripts/basic/fixdep
HOSTCC scripts/basic/split-include
HOSTCC scripts/basic/docproc
HOSTCC scripts/kconfig/conf.o
HOSTCC scripts/kconfig/kxgettext.o
HOSTCC scripts/kconfig/mconf.o
SHIPPED scripts/kconfig/zconf.tab.c
SHIPPED scripts/kconfig/lex.zconf.c
SHIPPED scripts/kconfig/zconf.hash.c
HOSTCC scripts/kconfig/zconf.tab.o
HOSTLD scripts/kconfig/conf
scripts/kconfig/conf -o arch/x86_64/Kconfig
#
# using defaults found in .config
#
*
* Linux Kernel Configuration
*
*
* Code maturity level options
*
Prompt for development and/or incomplete code/drivers (EXPERIMENTAL) [Y/n/?] y
*
* General setup
*
Local version - append to kernel release (LOCALVERSION) [-custom.amd64] -custom.amd64
Automatically append version information to the version string (LOCALVERSION_AUTO) [Y/n/?] y
Arbitrary version signature (VERSION_SIGNATURE) []
Support for paging of anonymous memory (swap) (SWAP) [Y/n/?] y
System V IPC (SYSVIPC) [Y/n/?] y
POSIX Message Queues (POSIX_MQUEUE) [Y/n/?] y
BSD Process Accounting (BSD_PROCESS_ACCT) [N/y/?] n
Sysctl support (SYSCTL) [Y/n/?] y
Auditing support (AUDIT) [Y/n/?] y
Enable system-call auditing support (AUDITSYSCALL) [Y/n/?] y
Kernel .config support (IKCONFIG) [Y/n/?] y
Enable access to .config through /proc/config.gz (IKCONFIG_PROC) [Y/n/?] y
Cpuset support (CPUSETS) [Y/n/?] y
Kernel->user space relay support (formerly relayfs) (RELAY) [N/y/?] n
Initramfs source file(s) (INITRAMFS_SOURCE) []
Optimize for size (Look out for broken compilers!) (CC_OPTIMIZE_FOR_SIZE) [Y/n/?] y
*
* Configure standard kernel features (for small systems)
*
Configure standard kernel features (for small systems) (EMBEDDED) [N/y/?] n
*
* Loadable module support
*
Enable loadable module support (MODULES) [Y/n/?] y
Module unloading (MODULE_UNLOAD) [Y/n/?] y
Forced module unloading (MODULE_FORCE_UNLOAD) [N/y/?] n
Module versioning support (MODVERSIONS) [N/y/?] n
Source checksum for all modules (MODULE_SRCVERSION_ALL) [N/y/?] n
Automatic kernel module loading (KMOD) [Y/n/?] y
*
* Block layer
*
Support for Large Block Devices (LBD) [N/y/?] n
Support for tracing block io actions (BLK_DEV_IO_TRACE) [N/y/?] n
Support for Large Single Files (LSF) [N/y/?] n
*
* IO Schedulers
*
Anticipatory I/O scheduler (IOSCHED_AS) [N/m/y/?] n
Deadline I/O scheduler (IOSCHED_DEADLINE) [Y/n/m/?] y
CFQ I/O scheduler (IOSCHED_CFQ) [Y/n/m/?] y
Default I/O scheduler
1. Deadline (DEFAULT_DEADLINE)
> 2. CFQ (DEFAULT_CFQ)
3. No-op (DEFAULT_NOOP)
choice[1-3?]: 2
*
* Processor type and features
*
Subarchitecture Type
> 1. PC-compatible (X86_PC)
2. Support for ScaleMP vSMP (X86_VSMP)
choice[1-2]: 1
Processor family
> 1. AMD-Opteron/Athlon64 (MK8)
2. Intel EM64T (MPSC)
3. Generic-x86-64 (GENERIC_CPU)
choice[1-3]: 1
Message for booting on non-x86_64 machine (32-bit) (X86_64_NOLONG_MSG) [Your CPU does not support long mode. Use a 32bit distribution.] Your CPU does not support long mode. Use a 32bit distribution.
/dev/cpu/microcode - Intel CPU microcode support (MICROCODE) [Y/n/m/?] y
/dev/cpu/*/msr - Model-specific register support (X86_MSR) [Y/n/m/?] y
/dev/cpu/*/cpuid - CPU information support (X86_CPUID) [Y/n/m/?] y
MTRR (Memory Type Range Register) support (MTRR) [Y/n/?] y
Symmetric multi-processing support (SMP) [Y/n/?] y
SMT (Hyperthreading) scheduler support (SCHED_SMT) [Y/n/?] y
Multi-core scheduler support (SCHED_MC) [Y/n/?] y
Preemption Model
1. No Forced Preemption (Server) (PREEMPT_NONE)
> 2. Voluntary Kernel Preemption (Desktop) (PREEMPT_VOLUNTARY)
3. Preemptible Kernel (Low-Latency Desktop) (PREEMPT)
choice[1-3]: 2
Preempt The Big Kernel Lock (PREEMPT_BKL) [Y/n/?] y
Non Uniform Memory Access (NUMA) Support (NUMA) [Y/n/?] y
Old style AMD Opteron NUMA detection (K8_NUMA) [Y/n/?] y
ACPI NUMA detection (X86_64_ACPI_NUMA) [Y/n/?] y
NUMA emulation (NUMA_EMU) [Y/n/?] y
Memory model
> 1. Discontiguous Memory (DISCONTIGMEM_MANUAL)
2. Sparse Memory (SPARSEMEM_MANUAL)
choice[1-2]: 1
Page migration (MIGRATION) [Y/n/?] y
Maximum number of CPUs (2-256) (NR_CPUS) [2] 2
Support for hot-pluggable CPUs (EXPERIMENTAL) (HOTPLUG_CPU) [Y/n/?] y
Provide RTC interrupt (HPET_EMULATE_RTC) [Y/n] y
K8 GART IOMMU support (GART_IOMMU) [Y/n/?] y
Machine check support (X86_MCE) [Y/?] (NEW) y
Intel MCE features (X86_MCE_INTEL) [Y/n/?] y
AMD MCE features (X86_MCE_AMD) [Y/n/?] y
kexec system call (EXPERIMENTAL) (KEXEC) [N/y/?] n
kernel crash dumps (EXPERIMENTAL) (CRASH_DUMP) [N/y/?] n
Enable seccomp to safely compute untrusted bytecode (SECCOMP) [Y/n/?] y
Disable the TSC for seccomp tasks (SECCOMP_DISABLE_TSC) [Y/n/?] y
Timer frequency
1. 100 HZ (HZ_100)
> 2. 250 HZ (HZ_250)
3. 1000 HZ (HZ_1000)
choice[1-3?]: 2
Function reordering (REORDER) [Y/n/?] y
*
* Power management options
*
Power Management support (PM) [Y/?] y
Legacy Power Management API (PM_LEGACY) [Y/n/?] y
Power Management Debug Support (PM_DEBUG) [N/y/?] n
Disable Power Management messing with the active console (PM_DISABLE_CONSOLE) [N/y/?] n
Software Suspend (SOFTWARE_SUSPEND) [N/y/?] n
*
* ACPI (Advanced Configuration and Power Interface) Support
*
ACPI Support (ACPI) [Y/?] y
Sleep States (ACPI_SLEEP) [Y/n/?] y
/proc/acpi/sleep (deprecated) (ACPI_SLEEP_PROC_SLEEP) [N/y/?] n
AC Adapter (ACPI_AC) [Y/n/m/?] y
Battery (ACPI_BATTERY) [N/m/y/?] n
Button (ACPI_BUTTON) [Y/n/m/?] y
Video (ACPI_VIDEO) [Y/n/m/?] y
Generic Hotkey (EXPERIMENTAL) (ACPI_HOTKEY) [M/n/y/?] m
Fan (ACPI_FAN) [Y/n/m/?] y
Dock (ACPI_DOCK) [N/m/y/?] n
Processor (ACPI_PROCESSOR) [Y/n/m/?] y
Thermal Zone (ACPI_THERMAL) [Y/n/m/?] y
NUMA support (ACPI_NUMA) [Y] y
ASUS/Medion Laptop Extras (ACPI_ASUS) [N/m/y/?] n
IBM ThinkPad Laptop Extras (ACPI_IBM) [N/m/y/?] n
Toshiba Laptop Extras (ACPI_TOSHIBA) [N/m/y/?] n
Panasonic Laptop Extras (ACPI_PCC) [N/m/y/?] n
Sony Laptop Extras (ACPI_SONY) [N/m/y/?] n
Debug Statements (ACPI_DEBUG) [N/y/?] n
ACPI0004,PNP0A05 and PNP0A06 Container Driver (EXPERIMENTAL) (ACPI_CONTAINER) [Y/?] y
ACPI Windows Management Interface for HP TC1100 Tablet (ACPI_TC1100) [N/m/y/?] n
Read DSDT from initrd or initramfs (ACPI_INITRD) [Y/n/?] y
Device node for ACPI method execution (ACPI_DEV) [M/n/y/?] m
*
* CPU Frequency scaling
*
CPU Frequency scaling (CPU_FREQ) [Y/n/?] y
Enable CPUfreq debugging (CPU_FREQ_DEBUG) [N/y/?] n
CPU frequency translation statistics (CPU_FREQ_STAT) [Y/n/m/?] y
CPU frequency translation statistics details (CPU_FREQ_STAT_DETAILS) [N/y/?] n
Default CPUFreq governor
1. performance (CPU_FREQ_DEFAULT_GOV_PERFORMANCE)
> 2. userspace (CPU_FREQ_DEFAULT_GOV_USERSPACE)
choice[1-2?]: 2
'performance' governor (CPU_FREQ_GOV_PERFORMANCE) [Y/n/m/?] y
'powersave' governor (CPU_FREQ_GOV_POWERSAVE) [N/m/y/?] n
'userspace' governor for userspace frequency scaling (CPU_FREQ_GOV_USERSPACE) [Y/?] y
'ondemand' cpufreq policy governor (CPU_FREQ_GOV_ONDEMAND) [Y/n/m/?] y
'conservative' cpufreq governor (CPU_FREQ_GOV_CONSERVATIVE) [N/m/y/?] n
*
* CPUFreq processor drivers
*
AMD Opteron/Athlon64 PowerNow! (X86_POWERNOW_K8) [Y/n/m/?] y
Intel Enhanced SpeedStep (X86_SPEEDSTEP_CENTRINO) [N/m/y/?] n
ACPI Processor P-States driver (X86_ACPI_CPUFREQ) [N/m/y/?] n
*
* shared options
*
/proc/acpi/processor/../performance interface (deprecated) (X86_ACPI_CPUFREQ_PROC_INTF) [N/y/?] n
*
* Bus options (PCI etc.)
*
PCI support (PCI) [Y] y
Support mmconfig PCI config space access (PCI_MMCONFIG) [Y/n] y
PCI Express support (PCIEPORTBUS) [Y/n/?] y
Message Signaled Interrupts (MSI and MSI-X) (PCI_MSI) [Y/n/?] y
*
* PCCARD (PCMCIA/CardBus) support
*
PCCard (PCMCIA/CardBus) support (PCCARD) [N/m/y/?] n
*
* PCI Hotplug Support
*
Support for PCI Hotplug (EXPERIMENTAL) (HOTPLUG_PCI) [N/m/y/?] n
*
* Executable file formats / Emulations
*
Kernel support for ELF binaries (BINFMT_ELF) [Y/n/?] y
Kernel support for MISC binaries (BINFMT_MISC) [M/n/y/?] m
IA32 Emulation (IA32_EMULATION) [Y/n/?] y
IA32 a.out support (IA32_AOUT) [Y/n/m/?] y
*
* Networking
*
Networking support (NET) [Y/?] y
*
* Networking options
*
Network packet debugging (NETDEBUG) [N/y/?] n
Packet socket (PACKET) [M/n/y/?] m
Packet socket: mmapped IO (PACKET_MMAP) [Y/n/?] y
Unix domain sockets (UNIX) [M/n/y/?] m
IPsec user configuration interface (XFRM_USER) [M/n/y/?] m
PF_KEY sockets (NET_KEY) [M/n/y/?] m
TCP/IP networking (INET) [Y/n/?] y
IP: multicasting (IP_MULTICAST) [Y/n/?] y
IP: advanced router (IP_ADVANCED_ROUTER) [N/y/?] n
IP: kernel level autoconfiguration (IP_PNP) [Y/n/?] y
IP: DHCP support (IP_PNP_DHCP) [Y/n/?] y
IP: BOOTP support (IP_PNP_BOOTP) [N/y/?] n
IP: RARP support (IP_PNP_RARP) [N/y/?] n
IP: tunneling (NET_IPIP) [M/n/y/?] m
IP: GRE tunnels over IP (NET_IPGRE) [M/n/y/?] m
IP: broadcast GRE over IP (NET_IPGRE_BROADCAST) [N/y/?] n
IP: multicast routing (IP_MROUTE) [N/y/?] n
IP: ARP daemon support (EXPERIMENTAL) (ARPD) [N/y/?] n
IP: TCP syncookie support (disabled per default) (SYN_COOKIES) [N/y/?] n
IP: AH transformation (INET_AH) [M/n/y/?] m
IP: ESP transformation (INET_ESP) [M/n/y/?] m
IP: IPComp transformation (INET_IPCOMP) [M/n/y/?] m
INET: socket monitoring interface (INET_DIAG) [M/n/y/?] m
TCP: advanced congestion control (TCP_CONG_ADVANCED) [N/y/?] n
*
* IP: Virtual Server Configuration
*
IP virtual server support (EXPERIMENTAL) (IP_VS) [N/m/y/?] n
The IPv6 protocol (IPV6) [M/n/y/?] m
IPv6: Privacy Extensions support (IPV6_PRIVACY) [N/y/?] n
IPv6: Router Preference (RFC 4191) support (IPV6_ROUTER_PREF) [N/y/?] n
IPv6: AH transformation (INET6_AH) [M/n/?] m
IPv6: ESP transformation (INET6_ESP) [M/n/?] m
IPv6: IPComp transformation (INET6_IPCOMP) [M/n/?] m
IPv6: IPv6-in-IPv6 tunnel (IPV6_TUNNEL) [N/m/?] n
*
* Network packet filtering (replaces ipchains)
*
Network packet filtering (replaces ipchains) (NETFILTER) [Y/n/?] y
Network packet filtering debugging (NETFILTER_DEBUG) [N/y/?] n
*
* Core Netfilter Configuration
*
Netfilter netlink interface (NETFILTER_NETLINK) [M/n/y/?] m
Netfilter NFQUEUE over NFNETLINK interface (NETFILTER_NETLINK_QUEUE) [M/n/?] m
Netfilter LOG over NFNETLINK interface (NETFILTER_NETLINK_LOG) [M/n/?] m
Netfilter Xtables support (required for ip_tables) (NETFILTER_XTABLES) [M/n/y/?] m
"CLASSIFY" target support (NETFILTER_XT_TARGET_CLASSIFY) [N/m/?] n
"MARK" target support (NETFILTER_XT_TARGET_MARK) [N/m/?] n
"NFQUEUE" target Support (NETFILTER_XT_TARGET_NFQUEUE) [N/m/?] n
"comment" match support (NETFILTER_XT_MATCH_COMMENT) [N/m/?] n
"conntrack" connection tracking match support (NETFILTER_XT_MATCH_CONNTRACK) [N/m/?] n
"DCCP" protocol match support (NETFILTER_XT_MATCH_DCCP) [N/m/?] n
"ESP" match support (NETFILTER_XT_MATCH_ESP) [N/m/?] n
"helper" match support (NETFILTER_XT_MATCH_HELPER) [N/m/?] n
"length" match support (NETFILTER_XT_MATCH_LENGTH) [N/m/?] n
"limit" match support (NETFILTER_XT_MATCH_LIMIT) [N/m/?] n
"mac" address match support (NETFILTER_XT_MATCH_MAC) [M/n/?] m
"mark" match support (NETFILTER_XT_MATCH_MARK) [N/m/?] n
IPsec "policy" match support (NETFILTER_XT_MATCH_POLICY) [N/m/?] n
Multiple port match support (NETFILTER_XT_MATCH_MULTIPORT) [M/n/?] m
"pkttype" packet type match support (NETFILTER_XT_MATCH_PKTTYPE) [M/n/?] m
"realm" match support (NETFILTER_XT_MATCH_REALM) [N/m/?] n
"sctp" protocol match support (NETFILTER_XT_MATCH_SCTP) [N/m/?] n
"state" match support (NETFILTER_XT_MATCH_STATE) [N/m/?] n
"string" match support (NETFILTER_XT_MATCH_STRING) [N/m/?] n
"tcpmss" match support (NETFILTER_XT_MATCH_TCPMSS) [N/m/?] n
*
* IP: Netfilter Configuration
*
Connection tracking (required for masq/NAT) (IP_NF_CONNTRACK) [M/n/y/?] m
Connection tracking flow accounting (IP_NF_CT_ACCT) [N/y/?] n
Connection mark tracking support (IP_NF_CONNTRACK_MARK) [N/y/?] n
Connection tracking events (EXPERIMENTAL) (IP_NF_CONNTRACK_EVENTS) [N/y/?] n
Connection tracking netlink interface (EXPERIMENTAL) (IP_NF_CONNTRACK_NETLINK) [M/n/?] m
SCTP protocol connection tracking support (EXPERIMENTAL) (IP_NF_CT_PROTO_SCTP) [M/n/?] m
FTP protocol support (IP_NF_FTP) [M/n/?] m
IRC protocol support (IP_NF_IRC) [M/n/?] m
NetBIOS name service protocol support (EXPERIMENTAL) (IP_NF_NETBIOS_NS) [M/n/?] m
TFTP protocol support (IP_NF_TFTP) [M/n/?] m
Amanda backup protocol support (IP_NF_AMANDA) [N/m/?] n
PPTP protocol support (IP_NF_PPTP) [M/n/?] m
H.323 protocol support (EXPERIMENTAL) (IP_NF_H323) [M/n/?] m
IP Userspace queueing via NETLINK (OBSOLETE) (IP_NF_QUEUE) [N/m/y/?] n
IP tables support (required for filtering/masq/NAT) (IP_NF_IPTABLES) [M/n/?] m
IP range match support (IP_NF_MATCH_IPRANGE) [M/n/?] m
TOS match support (IP_NF_MATCH_TOS) [N/m/?] n
recent match support (IP_NF_MATCH_RECENT) [N/m/?] n
ECN match support (IP_NF_MATCH_ECN) [N/m/?] n
DSCP match support (IP_NF_MATCH_DSCP) [N/m/?] n
AH match support (IP_NF_MATCH_AH) [N/m/?] n
TTL match support (IP_NF_MATCH_TTL) [N/m/?] n
Owner match support (IP_NF_MATCH_OWNER) [N/m/?] n
address type match support (IP_NF_MATCH_ADDRTYPE) [N/m/?] n
hashlimit match support (IP_NF_MATCH_HASHLIMIT) [N/m/?] n
stealth match support (IP_NF_MATCH_STEALTH) [M/n/?] m
Packet filtering (IP_NF_FILTER) [M/n/?] m
REJECT target support (IP_NF_TARGET_REJECT) [M/n/?] m
LOG target support (IP_NF_TARGET_LOG) [M/n/?] m
ULOG target support (IP_NF_TARGET_ULOG) [N/m/?] n
TCPMSS target support (IP_NF_TARGET_TCPMSS) [N/m/?] n
Full NAT (IP_NF_NAT) [M/n/?] m
MASQUERADE target support (IP_NF_TARGET_MASQUERADE) [N/m/?] n
REDIRECT target support (IP_NF_TARGET_REDIRECT) [N/m/?] n
NETMAP target support (IP_NF_TARGET_NETMAP) [N/m/?] n
SAME target support (IP_NF_TARGET_SAME) [N/m/?] n
Basic SNMP-ALG support (EXPERIMENTAL) (IP_NF_NAT_SNMP_BASIC) [N/m/?] n
Packet mangling (IP_NF_MANGLE) [N/m/?] n
raw table support (required for NOTRACK/TRACE) (IP_NF_RAW) [N/m/?] n
ARP tables support (IP_NF_ARPTABLES) [N/m/?] n
*
* IPv6: Netfilter Configuration (EXPERIMENTAL)
*
IP6 Userspace queueing via NETLINK (OBSOLETE) (IP6_NF_QUEUE) [N/m/?] n
IP6 tables support (required for filtering/masq/NAT) (IP6_NF_IPTABLES) [M/n/?] m
Routing header match support (IP6_NF_MATCH_RT) [N/m/?] n
Hop-by-hop and Dst opts header match support (IP6_NF_MATCH_OPTS) [N/m/?] n
Fragmentation header match support (IP6_NF_MATCH_FRAG) [N/m/?] n
HL match support (IP6_NF_MATCH_HL) [N/m/?] n
Owner match support (IP6_NF_MATCH_OWNER) [N/m/?] n
IPv6 Extension Headers Match (IP6_NF_MATCH_IPV6HEADER) [N/m/?] n
AH match support (IP6_NF_MATCH_AH) [N/m/?] n
EUI64 address check (IP6_NF_MATCH_EUI64) [N/m/?] n
Packet filtering (IP6_NF_FILTER) [N/m/?] n
Packet mangling (IP6_NF_MANGLE) [N/m/?] n
raw table support (required for TRACE) (IP6_NF_RAW) [N/m/?] n
*
* DCCP Configuration (EXPERIMENTAL)
*
The DCCP Protocol (EXPERIMENTAL) (IP_DCCP) [N/m/y/?] n
*
* SCTP Configuration (EXPERIMENTAL)
*
The SCTP Protocol (EXPERIMENTAL) (IP_SCTP) [N/m/?] n
*
* TIPC Configuration (EXPERIMENTAL)
*
The TIPC Protocol (EXPERIMENTAL) (TIPC) [N/m/y/?] n
Asynchronous Transfer Mode (ATM) (EXPERIMENTAL) (ATM) [N/m/y/?] n
802.1d Ethernet Bridging (BRIDGE) [N/m/y/?] n
802.1Q VLAN Support (VLAN_8021Q) [N/m/y/?] n
DECnet Support (DECNET) [N/m/y/?] n
ANSI/IEEE 802.2 LLC type 2 Support (LLC2) [N/m/y/?] n
The IPX protocol (IPX) [N/m/y/?] n
Appletalk protocol support (ATALK) [N/m/y/?] n
CCITT X.25 Packet Layer (EXPERIMENTAL) (X25) [M/n/y/?] m
LAPB Data Link Driver (EXPERIMENTAL) (LAPB) [M/n/y/?] m
Frame Diverter (EXPERIMENTAL) (NET_DIVERT) [N/y/?] n
Acorn Econet/AUN protocols (EXPERIMENTAL) (ECONET) [N/m/y/?] n
WAN router (WAN_ROUTER) [N/m/y/?] n
*
* QoS and/or fair queueing
*
QoS and/or fair queueing (NET_SCHED) [N/y/?] n
*
* Network testing
*
Packet Generator (USE WITH CAUTION) (NET_PKTGEN) [N/m/y/?] n
*
* Amateur Radio support
*
Amateur Radio support (HAMRADIO) [N/y/?] n
*
* IrDA (infrared) subsystem support
*
IrDA (infrared) subsystem support (IRDA) [N/m/y/?] n
*
* Bluetooth subsystem support
*
Bluetooth subsystem support (BT) [N/m/y/?] n
Generic IEEE 802.11 Networking Stack (IEEE80211) [N/m/y/?] n
*
* Device Drivers
*
*
* Generic Driver Options
*
Select only drivers that don't need compile-time external firmware (STANDALONE) [Y/n/?] y
Prevent firmware from being built (PREVENT_FIRMWARE_BUILD) [Y/n/?] y
Userspace firmware loading support (FW_LOADER) [Y/n/m/?] y
*
* Connector - unified userspace <-> kernelspace linker
*
Connector - unified userspace <-> kernelspace linker (CONNECTOR) [M/n/y/?] m
*
* Memory Technology Devices (MTD)
*
Memory Technology Device (MTD) support (MTD) [M/n/y/?] m
Debugging (MTD_DEBUG) [N/y/?] n
MTD concatenating support (MTD_CONCAT) [N/m/?] n
MTD partitioning support (MTD_PARTITIONS) [Y/?] y
RedBoot partition table parsing (MTD_REDBOOT_PARTS) [M/n/y/?] m
Location of RedBoot partition table (MTD_REDBOOT_DIRECTORY_BLOCK) [-1] -1
Include unallocated flash regions (MTD_REDBOOT_PARTS_UNALLOCATED) [Y/n/?] y
Force read-only for RedBoot system images (MTD_REDBOOT_PARTS_READONLY) [N/y/?] n
Command line partition table parsing (MTD_CMDLINE_PARTS) [N/y/?] n
*
* User Modules And Translation Layers
*
Direct char device access to MTD devices (MTD_CHAR) [M/n/?] m
Caching block device access to MTD devices (MTD_BLOCK) [N/m/?] n
Readonly block device access to MTD devices (MTD_BLOCK_RO) [N/m/?] n
FTL (Flash Translation Layer) support (FTL) [M/n/?] m
NFTL (NAND Flash Translation Layer) support (NFTL) [M/n/?] m
Write support for NFTL (NFTL_RW) [Y/n/?] y
INFTL (Inverse NAND Flash Translation Layer) support (INFTL) [M/n/?] m
Resident Flash Disk (Flash Translation Layer) support (RFD_FTL) [M/n/?] m
*
* RAM/ROM/Flash chip drivers
*
Detect flash chips by Common Flash Interface (CFI) probe (MTD_CFI) [M/n/?] m
Detect non-CFI AMD/JEDEC-compatible flash chips (MTD_JEDECPROBE) [M/?] m
Flash chip driver advanced configuration options (MTD_CFI_ADV_OPTIONS) [N/y/?] n
Support for Intel/Sharp flash chips (MTD_CFI_INTELEXT) [M/n/?] m
Support for AMD/Fujitsu flash chips (MTD_CFI_AMDSTD) [M/?] m
Support for ST (Advanced Architecture) flash chips (MTD_CFI_STAA) [M/n/?] m
Support for RAM chips in bus mapping (MTD_RAM) [M/?] m
Support for ROM chips in bus mapping (MTD_ROM) [M/n/?] m
Support for absent chips in bus mapping (MTD_ABSENT) [M/n/?] m
Older (theoretically obsoleted now) drivers for non-CFI chips (MTD_OBSOLETE_CHIPS) [N/y/?] n
*
* Mapping drivers for chip access
*
Support non-linear mappings of flash chips (MTD_COMPLEX_MAPPINGS) [Y/n/?] y
CFI Flash device in physical memory map (MTD_PHYSMAP) [N/m/?] n
CFI Flash device mapped on Photron PNC-2000 (MTD_PNC2000) [M/n/?] m
CFI Flash device mapped on AMD SC520 CDP (MTD_SC520CDP) [M/n/?] m
CFI Flash device mapped on AMD NetSc520 (MTD_NETSC520) [M/n/?] m
JEDEC Flash device mapped on Technologic Systems TS-5500 (MTD_TS5500) [M/n/y/?] m
CFI Flash device mapped on Arcom SBC-GXx boards (MTD_SBC_GXX) [M/n/?] m
BIOS flash chip on AMD76x southbridge (MTD_AMD76XROM) [M/n/?] m
BIOS flash chip on Intel Controller Hub 2/3/4/5 (MTD_ICHXROM) [M/n/?] m
BIOS flash chip on Intel SCB2 boards (MTD_SCB2_FLASH) [M/n/?] m
CFI flash device on SnapGear/SecureEdge (MTD_NETtel) [M/n/?] m
BIOS flash chip on Intel L440GX boards (MTD_L440GX) [M/n/?] m
PCI MTD driver (MTD_PCI) [M/n/?] m
Map driver for platform device RAM (mtd-ram) (MTD_PLATRAM) [M/n/?] m
*
* Self-contained MTD device drivers
*
Ramix PMC551 PCI Mezzanine RAM card support (MTD_PMC551) [M/n/?] m
PMC551 256M DRAM Bugfix (MTD_PMC551_BUGFIX) [Y/n/?] y
PMC551 Debugging (MTD_PMC551_DEBUG) [N/y/?] n
Support for AT45xxx DataFlash (MTD_DATAFLASH) [N/m/?] n
Support for M25 SPI Flash (MTD_M25P80) [N/m/?] n
Uncached system RAM (MTD_SLRAM) [M/n/?] m
Physical system RAM (MTD_PHRAM) [M/n/?] m
Test driver using RAM (MTD_MTDRAM) [N/m/?] n
MTD using block device (MTD_BLOCK2MTD) [N/m/?] n
*
* Disk-On-Chip Device Drivers
*
M-Systems Disk-On-Chip 2000 and Millennium (DEPRECATED) (MTD_DOC2000) [N/m/?] n
M-Systems Disk-On-Chip Millennium-only alternative driver (DEPRECATED) (MTD_DOC2001) [N/m/?] n
M-Systems Disk-On-Chip Millennium Plus (MTD_DOC2001PLUS) [M/n/?] m
Advanced detection options for DiskOnChip (MTD_DOCPROBE_ADVANCED) [N/y/?] n
*
* NAND Flash Device Drivers
*
NAND Device Support (MTD_NAND) [M/n/?] m
Verify NAND page writes (MTD_NAND_VERIFY_WRITE) [Y/n/?] y
DiskOnChip 2000, Millennium and Millennium Plus (NAND reimplementation) (EXPERIMENTAL) (MTD_NAND_DISKONCHIP) [M/n/?] m
Advanced detection options for DiskOnChip (MTD_NAND_DISKONCHIP_PROBE_ADVANCED) [N/y/?] n
Allow BBT writes on DiskOnChip Millennium and 2000TSOP (MTD_NAND_DISKONCHIP_BBTWRITE) [Y/n/?] y
Support for NAND Flash Simulator (MTD_NAND_NANDSIM) [M/n/?] m
*
* OneNAND Flash Device Drivers
*
OneNAND Device Support (MTD_ONENAND) [M/n/?] m
Verify OneNAND page writes (MTD_ONENAND_VERIFY_WRITE) [Y/n/?] y
*
* Parallel port support
*
Parallel port support (PARPORT) [M/n/y/?] m
PC-style hardware (PARPORT_PC) [M/n/?] m
Multi-IO cards (parallel and serial) (PARPORT_SERIAL) [M/n/?] m
Use FIFO/DMA if available (EXPERIMENTAL) (PARPORT_PC_FIFO) [Y/n/?] y
SuperIO chipset support (EXPERIMENTAL) (PARPORT_PC_SUPERIO) [Y/n/?] y
IEEE 1284 transfer modes (PARPORT_1284) [Y/n/?] y
*
* Plug and Play support
*
Plug and Play support (PNP) [Y/n/?] y
PnP Debug Messages (PNP_DEBUG) [N/y/?] n
*
* Protocols
*
Plug and Play ACPI support (EXPERIMENTAL) (PNPACPI) [Y/n/?] y
*
* Block devices
*
Normal floppy disk support (BLK_DEV_FD) [Y/n/m/?] y
Parallel port IDE device support (PARIDE) [M/n/?] m
*
* Parallel IDE high-level drivers
*
Parallel port IDE disks (PARIDE_PD) [M/n/?] m
Parallel port ATAPI CD-ROMs (PARIDE_PCD) [M/n/?] m
Parallel port ATAPI disks (PARIDE_PF) [M/n/?] m
Parallel port ATAPI tapes (PARIDE_PT) [M/n/?] m
Parallel port generic ATAPI devices (PARIDE_PG) [M/n/?] m
*
* Parallel IDE protocol modules
*
ATEN EH-100 protocol (PARIDE_ATEN) [N/m/?] n
MicroSolutions backpack (Series 5) protocol (PARIDE_BPCK) [N/m/?] n
DataStor Commuter protocol (PARIDE_COMM) [N/m/?] n
DataStor EP-2000 protocol (PARIDE_DSTR) [N/m/?] n
FIT TD-2000 protocol (PARIDE_FIT2) [N/m/?] n
FIT TD-3000 protocol (PARIDE_FIT3) [N/m/?] n
Shuttle EPAT/EPEZ protocol (PARIDE_EPAT) [N/m/?] n
Shuttle EPIA protocol (PARIDE_EPIA) [N/m/?] n
Freecom IQ ASIC-2 protocol (PARIDE_FRIQ) [N/m/?] n
FreeCom power protocol (PARIDE_FRPW) [N/m/?] n
KingByte KBIC-951A/971A protocols (PARIDE_KBIC) [N/m/?] n
KT PHd protocol (PARIDE_KTTI) [N/m/?] n
OnSpec 90c20 protocol (PARIDE_ON20) [N/m/?] n
OnSpec 90c26 protocol (PARIDE_ON26) [N/m/?] n
Compaq SMART2 support (BLK_CPQ_DA) [N/m/y/?] n
Compaq Smart Array 5xxx support (BLK_CPQ_CISS_DA) [N/m/y/?] n
Mylex DAC960/DAC1100 PCI RAID Controller support (BLK_DEV_DAC960) [N/m/y/?] n
Micro Memory MM5415 Battery Backed RAM support (EXPERIMENTAL) (BLK_DEV_UMEM) [N/m/y/?] n
Loopback device support (BLK_DEV_LOOP) [Y/n/m/?] y
Cryptoloop Support (BLK_DEV_CRYPTOLOOP) [Y/n/m/?] y
Compressed Loop Support (BLK_DEV_CLOOP) [N/m/y/?] n
Network

Sorry to state the obvious, but just in case:

are you patching against a clean vanilla kernel from kernel.org? You cannot patch a distro's kernel with grsecurity, unless you want to patch it manually...

Glad you asked, because it was not obvious to me. (I'm new to Linux, but not computers in general.) I've spent since Thanksgiving trying to get a new box built correctly with just Linux, VServer, and GRSecurity. I've learned to successfully compile the kernel, but getting the correct combination of versions of all three has been a challenge. Linux 2.6.17.11 source just came down from the Ubuntu repositories. And now you tell me it's not enough? Bummer.

I'm using this distro because it has all the drivers I need for my new hardware. I have not yet learned how to patch a vanilla kernel from kernel.org with patches to get it up to equivalent of the Edgy release of Ubuntu. But the vanilla kernel doesn't include the drivers I need and an attempt to compile one couldn't find my SATA drives on bootup. So I seem to be in a catch-22.

How do I get: 1) an AMD64 SMP specific kernel using Ubuntu Edgy, with 2) GRSecurity?

--L@neW

In general, any time you get a patch failure, you need to investigate before going further. If you are lucky, it failed in a component you do not need, such as a PowerPC patch failing when you intend to run an x86 kernel. If not, you need to determine why it failed, whether it will affect your kernel, and if so, how to apply an equivalent change. Building a kernel after some patches fail can be very dangerous. You are fortunate that the compilation failed. If it had not, you might have built a kernel that was subtly broken (such as not having some system calls correctly guarded by ACLs due to the patches for those calls not being applied).

I note that you are trying to get VServer and GRSecurity both layered onto the Ubuntu kernel. Have you confirmed that you can build and run an Ubuntu kernel that has neither VServer nor GRSecurity? This will establish a baseline that you have the tools to use the Ubuntu code. Once you have done this, try applying either VServer or GRSecurity, but not both at the same time. Verify that you can build and boot the resulting kernel. Having done all that, we can now turn to trying to get them all playing nicely. Post back if each of the configurations works alone.

Also, consider not using an Ubuntu kernel. The kernel releases from kernel.org are actually ahead of Ubuntu, not behind. It is likely that Ubuntu's drivers are either (a) backported from a newer kernel.org kernel to the series that the Ubuntu maintainers prefer or (b) drivers from outside the kernel tree, which the Ubuntu maintainers include in the distribution kernel as a convenience to the users. Try using a 2.6.19 or 2.6.20 kernel from kernel.org, just to see if your hardware is supported. If it is, you may be able to avoid the hassle of fixing these patches and be able to use a newer GRSecurity release.

L@neW wrote:Running Ubuntu Edgy Linux. "uname -a" produces "Linux ubuntu-xxx 2.6.17-11-generic #2 SMP Thu Feb 1 18:03:05 UTC 2007 x86_64 GNU/Linux". Hardware is an ASUS M2M32-SLI Delux MB with AMD K8 Athlon64 & 2GB RAM. Trying to compile a new kernel for the x86_64 architecture with VServer 2.0.2rc18 (the latest for this version of the kernel) and GRSecurity 2.1.9 using the kernel patch file "grsecurity-2.1.9-2.6.17.11-200609031316.patch".

http://linux-vserver.org/ provides vserver-grsec patches, i think you should probably try those instead of cooking up your own (note that i haven't actually checked let alone used them, but if anyone then they should be in the best position to get their part of the rejects right). also, stay with the latest kernel, we don't backport bugfixes/features to older versions.

Just wanted to report success following the advice of both KP and Pax Team. I wiped out my previous versions of the various kernel source files and started over with a vanilla version (2.6.19.3 as it happens) from the link on the VServer Wiki page. I chose that version because it was the most recent which had a combined patch for VS+GRSec, as well as a patch just for VS on their site. I then built the kernel alone, then with the VS patch. All went well. When I tried to then add the combined VS+GR patch, even including the -R switch, it failed. So I went back to the vanilla version and apply the combined patch without problems. It appears the VS+GR combined patch inserts the GR patch at a particular point in their patch sequence, which is why trying to patch them separately failed. Now I just have to tweak the settings.

Thanks for the responses.

--L@neW