booting the kernel. hangs for 2.6.32.41

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

booting the kernel. hangs for 2.6.32.41

Postby milktoast » Mon Jun 13, 2011 10:57 pm

Greetings all-

First time grsec user trying to patch 2.6.32.41 from kernel.org using grsecurity-2.2.2-2.6.32.41-201106131719.patch on an Ubuntu 10.10 server. This is my first time rolling a patched kernel of any kind so please excuse my noob-ness.

The general process I follow is:
1. Patch source
2. Copy over current config from /boot
3. Make menuconfig
4. Make-kpkg clean
5. Fakeroot Make-kpkg –initrd kernel_image
6. Install the .deb

Everything appears to go fine (no errors produced causing make to fail etc…) except when I reboot and select the grsec kernel in grub “Decompressing Linux... Parsing ELF... done. Booting the kernel.” is displayed and then the server just hangs.

I am able to use the above process to successfully compile/install/boot an unpatched 2.6.32.41 kernel.

I have tried this both on a P4 dell desktop, and under vmware player on a laptop running an Intel Core Duo T9300 @2.5Ghz

I note on my .config. In an attempt to troubleshoot, I have not enabled grsec/pax and still get the same result.

Any help you guys can provide is greatly appreciated.
Thanks!
milktoast
 
Posts: 5
Joined: Mon Jun 13, 2011 9:54 pm

Re: booting the kernel. hangs for 2.6.32.41

Postby PaX Team » Tue Jun 14, 2011 6:41 am

milktoast wrote:Everything appears to go fine (no errors produced causing make to fail etc…) except when I reboot and select the grsec kernel in grub “Decompressing Linux... Parsing ELF... done. Booting the kernel.” is displayed and then the server just hangs.
we have a wiki that among others describes how to report bugs to us ;). as a minimum, we'll need your bzImage and vmlinux.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm


Re: booting the kernel. hangs for 2.6.32.41

Postby PaX Team » Tue Jun 14, 2011 3:04 pm

milktoast wrote:Here are the files.
vmlinux too please ;). as a quick workaround, disable CONFIG_CC_STACKPROTECTOR and it should work i think.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: booting the kernel. hangs for 2.6.32.41

Postby milktoast » Tue Jun 14, 2011 9:21 pm

Here you go:
http://dl.dropbox.com/u/32331169/vmlinux

I'll also try to compile with that option set.
milktoast
 
Posts: 5
Joined: Mon Jun 13, 2011 9:54 pm

Re: booting the kernel. hangs for 2.6.32.41

Postby PaX Team » Wed Jun 15, 2011 8:03 am

milktoast wrote:Here you go:
http://dl.dropbox.com/u/32331169/vmlinux
ok, i've now compiled the same kernel with your config (with SSP enabled) and it works here so i'm guessing there's a toolchain problem somewhere. i see you used ubuntu's gcc 4.4.5, perhaps you can try something newer? also what's your ld version? if it's not 2.21, can you upgrade it too?
I'll also try to compile with that option set.
without, not with ;).
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: booting the kernel. hangs for 2.6.32.41

Postby PaX Team » Wed Jun 15, 2011 11:36 am

can you also upload arch/x86/boot/compressed/vmlinux.relocs that corresponds to the vmlinux you already uploaded (if you no longer have it then recreate and upload both, feel free to compress them)?
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: booting the kernel. hangs for 2.6.32.41

Postby milktoast » Thu Jun 16, 2011 11:58 am

PaX Team wrote:can you also upload arch/x86/boot/compressed/vmlinux.relocs that corresponds to the vmlinux you already uploaded them)?

Here you go: http://dl.dropbox.com/u/32331169/vmlinux.relocs.gz

PaX Team wrote: i see you used ubuntu's gcc 4.4.5, perhaps you can try something newer?

Will do, thanks.

PaX Team wrote:also what's your ld version? if it's not 2.21, can you upgrade it too?

2.20.51 so I'll upgrade that as well.

I should have more availability today for my todos. I really appreciate your help, thanks once again.
milktoast
 
Posts: 5
Joined: Mon Jun 13, 2011 9:54 pm

Re: booting the kernel. hangs for 2.6.32.41

Postby milktoast » Fri Jun 17, 2011 1:16 pm

I am able to compile and boot with the posted .config on 11.04 (gcc 4.5.2-8ubuntu4, ld 2.21.0.20110327). Thanks again for your help. Now on to compiling with a .config that actually has grsec/pax enabled :)
milktoast
 
Posts: 5
Joined: Mon Jun 13, 2011 9:54 pm


Return to grsecurity support