grsecurity forums

Posted: **Sun May 17, 2015 6:45 am**

I've downloaded and installed the three rpms in centos 6.5 x64(kvm guest),but it boot with kernel panic.
I've also installed paxctld.

kernel-3.2.69_grsec-1.x86_64.rpm
kernel-devel-3.2.69_grsec-1.x86_64.rpm
kernel-headers-3.2.69_grsec-1.x86_64.rpm

Posted: **Sun May 17, 2015 12:04 pm**

I will need to see the message(s) that appeared before that. Please also note that the site for paid kernel packages is not public yet.

-Brad

Posted: **Sun May 17, 2015 7:51 pm**

spender wrote:I will need to see the message(s) that appeared before that. Please also note that the site for paid kernel packages is not public yet.

-Brad

I want to find the latest pacth for 2.6.32 here and there,and I made an effort to find something,so I find the paid kernel packages,I will keep it secret.

I have the hnoor to be the first user of paid kernel in the whole wolrd.

It seems it did not mount the filesystem,but the kernel already build with ext4 support.

[root@10-10-54-163 grsec]# mount
/dev/vda1 on / type ext4 (rw,noatime,errors=remount-ro)
proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw)
devpts on /dev/pts type devpts (rw,gid=5,mode=620)
tmpfs on /dev/shm type tmpfs (rw)
none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw)
/dev/vdb on /data type ext3 (rw)

[root@10-10-54-163 grsec]# grep -i ext4 /boot/config-3.2.69-grsec
CONFIG_EXT4_FS=y
CONFIG_EXT4_USE_FOR_EXT23=y
CONFIG_EXT4_FS_XATTR=y
CONFIG_EXT4_FS_POSIX_ACL=y
CONFIG_EXT4_FS_SECURITY=y
# CONFIG_EXT4_DEBUG is not set

Posted: **Sun May 17, 2015 8:02 pm**

Can you show me what your grub config looks like? I've never seen this block: prefix used before for specifying a root filesystem device.

-Brad

Posted: **Sun May 17, 2015 8:42 pm**

spender wrote:Can you show me what your grub config looks like? I've never seen this block: prefix used before for specifying a root filesystem device.

-Brad

I run it in kvm guest

[root@10-10-54-163 grsec]# cat /boot/grub/menu.lst
# grub.conf generated by anaconda
#
# Note that you do not have to rerun grub after making changes to this file
# NOTICE: You do not have a /boot partition. This means that
# all kernel and initrd paths are relative to /, eg.
# root (hd0,0)
# kernel /boot/vmlinuz-version ro root=/dev/vda1
# initrd /boot/initrd-[generic-]version.img
#boot=/dev/vda
default=0
timeout=10
splashimage=(hd0,0)/boot/grub/splash.xpm.gz
hiddenmenu
title CentOS (3.2.69-grsec)
root (hd0,0)
kernel /boot/vmlinuz-3.2.69-grsec ro root=/dev/vda1 rd_NO_LUKS rd_NO_LVM LANG=en_US.UTF-8 rd_NO_MD SYSFONT=latarcyrheb-sun16 crashkernel=512M-2G:64M,2G-4G:128M,4G-:192M KEYBOARDTYPE=pc KEYTABLE=us rd_NO_DM quiet console=tty1 console=ttyS0,115200n8
initrd /boot/initramfs-3.2.69-grsec.img
title CentOS (2.6.32-431.11.7.el6.ucloud.x86_64)
root (hd0,0)
kernel /boot/vmlinuz-2.6.32-431.11.7.el6.ucloud.x86_64 ro root=/dev/vda1 rd_NO_LUKS rd_NO_LVM LANG=en_US.UTF-8 rd_NO_MD SYSFONT=latarcyrheb-sun16 crashkernel=512M-2G:64M,2G-4G:128M,4G-:192M KEYBOARDTYPE=pc KEYTABLE=us rd_NO_DM quiet console=tty1 console=ttyS0,115200n8
initrd /boot/initramfs-2.6.32-431.11.7.el6.ucloud.x86_64.img

Posted: **Sun May 17, 2015 8:50 pm**

Can you remove "quiet" from the kernel commandline and add "rdshell" and "rdinitdebug" to it, and then give me the output? You will likely need a serial console or network logging to be able to obtain the full logs.

Thanks,
-Brad

Posted: **Sat Jun 06, 2015 9:49 pm**

I've solved the problem.
I use the KVM host kernel to boot the kvm guest

grsecurity forums

[solved]centos 6.5 x64 boot with kernel panic

[solved]centos 6.5 x64 boot with kernel panic

Re: centos 6.5 x64 boot with kernel panic

Re: centos 6.5 x64 boot with kernel panic

Re: centos 6.5 x64 boot with kernel panic

Re: centos 6.5 x64 boot with kernel panic

Re: centos 6.5 x64 boot with kernel panic

Re: centos 6.5 x64 boot with kernel panic