grsecurity forums

i've the following problem. Have you any idea's ?

with kernel-2.4.16 and a older grsec version i've no problems.

Security-Level is HIGH.

Without the grsec-patch it's working ...

Thanks

- Thomas

/sbin/modprobe ipt_REJECT
/lib/modules/2.4.18-grsec.1.9.4/kernel/net/ipv4/netfilter/ipt_REJECT.o:
unresolved symbol ip_randomid
/lib/modules/2.4.18-grsec.1.9.4/kernel/net/ipv4/netfilter/ipt_REJECT.o:
unresolved symbol grsec_enable_randid
/lib/modules/2.4.18-grsec.1.9.4/kernel/net/ipv4/netfilter/ipt_REJECT.o:
insmod
/lib/modules/2.4.18-grsec.1.9.4/kernel/net/ipv4/netfilter/ipt_REJECT.o
failed
/lib/modules/2.4.18-grsec.1.9.4/kernel/net/ipv4/netfilter/ipt_REJECT.o:
insmod ipt_REJECT failed

ip_randomid is an exported symbol, so there shouldn't be any unresolved symbol problems. Out of the following options, which do you have enabled?

Random IP IDs
Random TCP source ports
Randomized PIDs
Randomized XIDs
Randomized TTL

I've seen this problem before, but only when the person didn't compile the modules correctly. You have to compile all the modules you need along with the kernel, then reboot, and the symbol messages will go away.

-Brad

i've only enabled "high" security as an option, i'm not using "custom".

after building my kernel i'm doing
make modules
make modules_install
then copy the System.map and bzImage to /boot and rerun lilo.
after the reboot i've the same error message.
without the grsec-patches it's working.

Thomas

[quote="spender"]ip_randomid is an exported symbol, so there shouldn't be any unresolved symbol problems. Out of the following options, which do you have enabled?

Random IP IDs
Random TCP source ports
Randomized PIDs
Randomized XIDs
Randomized TTL

I've seen this problem before, but only when the person didn't compile the modules correctly. You have to compile all the modules you need along with the kernel, then reboot, and the symbol messages will go away.

-Brad[/quote]