grsec + 2.4.19 + int crypto + freeswan

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

grsec + 2.4.19 + int crypto + freeswan

Postby dexta » Thu Oct 17, 2002 4:12 pm

hi there,

i've got some problems with the stuff from the topic

i just do cd /usr/src/linux
patch -Np1 -i ../grsecurity-1.9.7d-2.4.19.patch
patch -Np1 -i ../patch-int-2.4.19.2
make menuconfig dep

then

cd ../freeswan-1.98b
make menugo

everything looks allright
until it fills my ssh terminal with things like (this is the last part - there's too much to paste)

net/network.o: In function `match_pid':
net/network.o(.text+0x8a002): undefined reference to `gr_pid_is_chrooted'
net/network.o: In function `packet_create':
net/network.o(.text+0x8c8cb): undefined reference to `gr_is_capable'
net/network.o: In function `packet_ioctl':
net/network.o(.text+0x8d5a8): undefined reference to `gr_is_capable'
net/network.o: In function `xprt_request_init':
net/network.o(.text+0x90979): undefined reference to `grsec_enable_randrpc'
net/network.o(.text+0x90981): undefined reference to `ip_randomid'
net/network.o(.text+0x9098f): undefined reference to `ip_randomid'
net/network.o: In function `xprt_create_socket':
net/network.o(.text+0x90de3): undefined reference to `gr_is_capable'
crypto/crypto.o: In function `ipsec_tunnel_xmit':
crypto/crypto.o(.text+0x15e78): undefined reference to `grsec_enable_randid'
crypto/crypto.o(.text+0x15e80): undefined reference to `ip_randomid'
crypto/crypto.o: In function `ipsec_tunnel_ioctl':
crypto/crypto.o(.text+0x160ff): undefined reference to `gr_is_capable'
crypto/crypto.o(.text+0x1627f): undefined reference to `gr_is_capable'
crypto/crypto.o(.text+0x164d0): undefined reference to `gr_is_capable'
crypto/crypto.o(.text+0x1679f): undefined reference to `gr_is_capable'
crypto/crypto.o(.text+0x169af): undefined reference to `gr_is_capable'


this happens without freeswan too.

so what could be the problem?
dexta
 
Posts: 3
Joined: Thu Oct 17, 2002 3:37 pm

Postby spender » Thu Oct 17, 2002 6:43 pm

you left out failed hunks in net/netsyms.c. Unless you are able to ensure that there's no failed hunks and that the patches are compatible, don't expect it to work.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to grsecurity support

cron