grsecurity forums

Hi,
I'm trying to compile a kernel for debian etch amd64 with grsecurity support. I'm using the patch for version 2.6.27.10 but seems like there is a problem with the binutils version. I've been reading in another thread that there is no workarround for this problem, so my only solution is use a previous kernel version and a previous patch version, is't it?. My question is where can i found this version of the patch and in witch version shows up the problem with binutils.

Thanks in advance,

Your options are:
1 - use pinning and install the "testing"-version of binutils (this also means usings the libc6 from "testing")
2 - use "apt-get source binutils" to download the sources from testing and install the resulting .deb package on your system
3 - get the sources of the binutils and compile your own binaries (completely bypassing the package system, risking to break the package system)
4 - stick to the latest 2.1.11-grsecurity patch
5 - switch to another distribution which fits your needs better (perhaps debian testing)

The least work would be 4. But the most stable and best maintainable option, my guess, would be 2.
You do however need a lot of secondary packages to build your own binutils-package, which you might not want on your production system.

To give you an idea of the amount of work:

Code: Select all

# apt-get install dpkg-dev lsb-release dpatch autoconf expect texinfo
# apt-get source binutils
# cd binutils-2.18.1~cvs20080103
# dpkg-buildpackage -d
# cd ..
# dpkg -i binutils_2.18.1~cvs20080103*_i386.deb
# apt-get remove ...(all extra packages which are now not necessary anymore)...


It can almost be done automatically, but if you're not regularly building .deb's you should expect to lose some time due to errors in the process.
These are mostly simple errors, like missing packages, checks that won't complete, checking possible conflicts.