grsecurity forums

Hello

I am trying to compile grsecurity-2.1.9-2.6.17.11-200609031316 and 2.6.17.11 on Debian. I am using an old version because I have an old app that doesn't seem to run on anything other than 2.6.17.11, I don't know why.

All I have set with regards to grsecurity is setting it to high, nothing else, and I am using the generic configuration from the grsecurity docs.

When compiling, I get the following error:

Code: Select all

init/built-in.o: In function 'try_name':
do_mounts.c.text+0x503): undefined reference to `__stack_chk_fail'
init/built-in.o: In function 'name_to_dev_t':
(.text+0x7eb): undefined reference to `__stack_chk_fail'
init/built-in.o: In function 'change_floppy':
(.init.text+0x9c1):undefined reference to `__stack_chk_fail'
init/built-in.o: In function 'mount_block_root':
(.init.text+0xc57):undefined reference to `__stack_chk_fail'
init/built-in.o: In function 'do_header':
initramfs.c.init.text+0x4323):undefined reference to `__stack_chk_fail'
arch/i386/kernel/built-in.o.text+0x5261):more undefined references to `__stack_chk_fail' follow
make[1]: *** [vmlinux] Error 1
make[1]: Leaving directory `/usr/src/linux-2.6.17.11'
make: *** [debian/stamp-build-kernel] Error 2

I have tried the workaround that someone else here posted:

Code: Select all

export CFLAGS="$CFLAGS -fno-stack-protector"

But it does not work.

Do anyone know how i can get this to compile?

Kind regards

Try that way:

Code: Select all

make bzImage modules \
    CC="gcc -fno-stack-protector -fno-stack-protector-all"

clem wrote:I am trying to compile grsecurity-2.1.9-2.6.17.11-200609031316 and 2.6.17.11 on Debian. I am using an old version because I have an old app that doesn't seem to run on anything other than 2.6.17.11, I don't know why.

that's interesting, normally linux folks take great care to preserve binary compatibility. you should report this to lkml along with some straces probably.