Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.
by PaX Team » Wed Jan 21, 2015 12:15 pm
pageexec at freemail.hu
-
PaX Team
-
- Posts: 2310
- Joined: Mon Mar 18, 2002 4:35 pm
by atul.singh008 » Thu Jan 22, 2015 4:31 am
PaX Team wrote:pageexec at freemail.hu
Hi Pax,
Please check your email regarding the symbol table of cc1 binary.
-
atul.singh008
-
- Posts: 12
- Joined: Wed Dec 31, 2014 5:48 am
by PaX Team » Thu Jan 22, 2015 8:53 am
this binary does have the proper symbols so the only conclusion i can draw is that it is not the one that is actually used during kernel make... can you strace -s 1000 -f -e execve make and see what is actually getting executed?
-
PaX Team
-
- Posts: 2310
- Joined: Mon Mar 18, 2002 4:35 pm
by atul.singh008 » Fri Jan 23, 2015 4:22 am
- Code: Select all
strace -s 1000 -f -e execve make
execve("/usr/bin/make", ["make"], [/* 59 vars */]) = 0
Process 7698 attached
[pid 7698] execve("/bin/sh", ["/bin/sh", "-c", "uname -m | sed -e s/i.86/i386/ -e s/sun4u/sparc64/ -e s/arm.*/arm/ -e s/sa110/arm/ -e s/s390x/s390/ -e s/parisc64/parisc/ -e s/ppc.*/powerpc/ -e s/mips.*/mips/ -e s/sh[234].*/sh/ "], [/* 59 vars */]) = 0
Process 7699 attached
Process 7700 attached
[pid 7699] execve("/usr/bin/uname", ["uname", "-m"], [/* 58 vars */] <unfinished ...>
[pid 7700] execve("/usr/bin/sed", ["sed", "-e", "s/i.86/i386/", "-e", "s/sun4u/sparc64/", "-e", "s/arm.*/arm/", "-e", "s/sa110/arm/", "-e", "s/s390x/s390/", "-e", "s/parisc64/parisc/", "-e", "s/ppc.*/powerpc/", "-e", "s/mips.*/mips/", "-e", "s/sh[234].*/sh/"], [/* 58 vars */] <unfinished ...>
[pid 7699] <... execve resumed> ) = 0
[pid 7700] <... execve resumed> ) = 0
[pid 7699] +++ exited with 0 +++
[pid 7700] +++ exited with 0 +++
[pid 7698] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7699, si_status=0, si_utime=0, si_stime=0} ---
[pid 7698] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7698, si_status=0, si_utime=0, si_stime=0} ---
Process 7701 attached
[pid 7701] execve("/bin/sh", ["/bin/sh", "-c", "if [ -x \"$BASH\" ]; then echo $BASH; else if [ -x /bin/bash ]; then echo /bin/bash; else echo sh; fi ; fi"], [/* 59 vars */]) = 0
[pid 7701] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7701, si_status=0, si_utime=0, si_stime=0} ---
Process 7702 attached
[pid 7702] execve("/bin/sh", ["/bin/sh", "-c", "set -e; TMP=\".$$.tmp\"; TMPO=\".$$.o\"; if ( arm-pokymllibv5te-linux-gnueabi-gcc -D__KERNEL__ -Wall -Wundef -Wstrict-prototypes -Wno-trigraphs -fno-strict-aliasing -fno-common -Werror-implicit-function-declaration -Wno-format-security -fno-delete-null-pointer-checks -O2 --param=allow-store-data-races=0 -c -x c /dev/null -o \"$TMP\") >/dev/null 2>&1; then echo \"--param=allow-store-data-races=0\"; else echo \"\"; fi; rm -f \"$TMP\" \"$TMPO\""], [/* 59 vars */]) = 0
Process 7703 attached
[pid 7703] execve("/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/arm-pokymllibv5te-linux-gnueabi-gcc", ["arm-pokymllibv5te-linux-gnueabi-gcc", "-D__KERNEL__", "-Wall", "-Wundef", "-Wstrict-prototypes", "-Wno-trigraphs", "-fno-strict-aliasing", "-fno-common", "-Werror-implicit-function-declaration", "-Wno-format-security", "-fno-delete-null-pointer-checks", "-O2", "--param=allow-store-data-races=0", "-c", "-x", "c", "/dev/null", "-o", ".7702.tmp"], [/* 58 vars */]) = 0
Process 7704 attached
[pid 7704] execve("/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/../../libexec/arm-pokymllibv5te-linux-gnueabi/gcc/arm-pokymllibv5te-linux-gnueabi/4.9.1/cc1", ["/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/../../libexec/arm-pokymllibv5te-linux-gnueabi/gcc/arm-pokymllibv5te-linux-gnueabi/4.9.1/cc1", "-quiet", "-iprefix", "/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/../../lib/arm-pokymllibv5te-linux-gnueabi/gcc/arm-pokymllibv5te-linux-gnueabi/4.9.1/", "-D", "__KERNEL__", "/dev/null", "-quiet", "-dumpbase", "null", "-mtls-dialect=gnu", "-auxbase-strip", ".7702.tmp", "-O2", "-Wall", "-Wundef", "-Wstrict-prototypes", "-Wno-trigraphs", "-Werror=implicit-function-declaration", "-Wno-format-security", "-fno-strict-aliasing", "-fno-common", "-fno-delete-null-pointer-checks", "--param", "allow-store-data-races=0", "-o", "/tmp/ccPd5yNv.s"], [/* 61 vars */]) = 0
[pid 7704] +++ exited with 0 +++
[pid 7703] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7704, si_status=0, si_utime=0, si_stime=0} ---
Process 7705 attached
[pid 7705] execve("/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/../../libexec/arm-pokymllibv5te-linux-gnueabi/gcc/arm-pokymllibv5te-linux-gnueabi/4.9.1/as", ["/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/../../libexec/arm-pokymllibv5te-linux-gnueabi/gcc/arm-pokymllibv5te-linux-gnueabi/4.9.1/as", "-meabi=5", "-o", ".7702.tmp", "/tmp/ccPd5yNv.s"], [/* 61 vars */]) = 0
[pid 7705] +++ exited with 0 +++
[pid 7703] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7705, si_status=0, si_utime=0, si_stime=0} ---
[pid 7703] +++ exited with 0 +++
[pid 7702] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7703, si_status=0, si_utime=0, si_stime=0} ---
Process 7706 attached
[pid 7706] execve("/usr/bin/rm", ["rm", "-f", ".7702.tmp", ".7702.o"], [/* 58 vars */]) = 0
[pid 7706] +++ exited with 0 +++
[pid 7702] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7706, si_status=0, si_utime=0, si_stime=0} ---
[pid 7702] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7702, si_status=0, si_utime=0, si_stime=0} ---
Process 7707 attached
[pid 7707] execve("/bin/sh", ["/bin/sh", "/home/atulk/test/linux-3.2.64/scripts/gcc-version.sh", "arm-pokymllibv5te-linux-gnueabi-gcc"], [/* 59 vars */]) = 0
Process 7708 attached
Process 7709 attached
Process 7710 attached
Process 7711 attached
[pid 7709] +++ exited with 0 +++
[pid 7710] execve("/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/arm-pokymllibv5te-linux-gnueabi-gcc", ["arm-pokymllibv5te-linux-gnueabi-gcc", "-E", "-x", "c", "-"], [/* 58 vars */]) = 0
[pid 7711] execve("/usr/bin/tail", ["tail", "-n", "1"], [/* 58 vars */]) = 0
Process 7712 attached
[pid 7712] execve("/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/../../libexec/arm-pokymllibv5te-linux-gnueabi/gcc/arm-pokymllibv5te-linux-gnueabi/4.9.1/cc1", ["/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/../../libexec/arm-pokymllibv5te-linux-gnueabi/gcc/arm-pokymllibv5te-linux-gnueabi/4.9.1/cc1", "-E", "-quiet", "-iprefix", "/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/../../lib/arm-pokymllibv5te-linux-gnueabi/gcc/arm-pokymllibv5te-linux-gnueabi/4.9.1/", "-", "-mtls-dialect=gnu"], [/* 61 vars */]) = 0
.
.
.
.
.
.
.
Process 7973 attached
[pid 7973] execve("/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/../../libexec/arm-pokymllibv5te-linux-gnueabi/gcc/arm-pokymllibv5te-linux-gnueabi/4.9.1/cc1", ["/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/../../libexec/arm-pokymllibv5te-linux-gnueabi/gcc/arm-pokymllibv5te-linux-gnueabi/4.9.1/cc1", "-quiet", "-nostdinc", "-I", "/home/atulk/test/linux-3.2.64/arch/arm/include", "-I", "arch/arm/include/generated", "-I", "include", "-I", "arch/arm/mach-versatile/include", "-I", "arch/arm/plat-versatile/include", "-iprefix", "/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/../../lib/arm-pokymllibv5te-linux-gnueabi/gcc/arm-pokymllibv5te-linux-gnueabi/4.9.1/", "-iplugindir=/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/../../lib/arm-pokymllibv5te-linux-gnueabi/gcc/arm-pokymllibv5te-linux-gnueabi/4.9.1/plugin", "-D", "__KERNEL__", "-D", "__LINUX_ARM_ARCH__=5", "-U", "arm", "-D", "CC_HAVE_ASM_GOTO", "-D", "LATENT_ENTROPY_PLUGIN", "-D", "STRUCTLEAK_PLUGIN", "-D", "RANDSTRUCT_PLUGIN", "-D", "KBUILD_STR(s)=#s", "-D", "KBUILD_BASENAME=KBUILD_STR(bounds)", "-D", "KBUILD_MODNAME=KBUILD_STR(bounds)", "-isystem", "/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/../../lib/arm-pokymllibv5te-linux-gnueabi/gcc/arm-pokymllibv5te-linux-gnueabi/4.9.1/include", "-include", "/home/atulk/test/linux-3.2.64/include/linux/kconfig.h", "-MD", "kernel/.bounds.s.d", "kernel/bounds.c", "-iplugindir=/home/atulk/test/ARM_plugin/sysroots/i686-pokysdk-linux/usr/bin/arm-pokymllibv5te-linux-gnueabi/../../lib/arm-pokymllibv5te-linux-gnueabi/gcc/arm-pokymllibv5te-linux-gnueabi/4.9.1/plugin", "-quiet", "-dumpbase", "bounds.c", "-mlittle-endian", "-marm", "-mapcs", "-mno-sched-prolog", "-mabi=aapcs-linux", "-mno-thumb-interwork", "-march=armv5te", "-mtune=arm9tdmi", "-mfloat-abi=soft", "-mtls-dialect=gnu", "-auxbase-strip", "kernel/bounds.s", "-O2", "-Wall", "-Wundef", "-Wstrict-prototypes", "-Wno-trigraphs", "-Werror=implicit-function-declaration", "-Wno-format-security", "-Wframe-larger-than=1024", "-Wno-unused-but-set-variable", "-Wdeclaration-after-statement", "-Wno-pointer-sign", "-fno-strict-aliasing", "-fno-common", "-fno-delete-null-pointer-checks", "-fno-dwarf2-cfi-asm", "-fno-stack-protector", "-fno-omit-frame-pointer", "-fno-optimize-sibling-calls", "-fno-var-tracking-assignments", "-fno-strict-overflow", "-fconserve-stack", "-fplugin=/home/atulk/test/linux-3.2.64/tools/gcc/colorize_plugin.so", "-fplugin=/home/atulk/test/linux-3.2.64/tools/gcc/latent_entropy_plugin.so", "-fplugin=/home/atulk/test/linux-3.2.64/tools/gcc/structleak_plugin.so", "-fplugin=/home/atulk/test/linux-3.2.64/tools/gcc/randomize_layout_plugin.so", "-fverbose-asm", "-o", "kernel/bounds.s", "--param", "allow-store-data-races=0"], [/* 135 vars */]) = 0
cc1: error: cannot load plugin /home/atulk/test/linux-3.2.64/tools/gcc/colorize_plugin.so
/home/atulk/test/linux-3.2.64/tools/gcc/colorize_plugin.so: undefined symbol: _ZN8opt_pass5cloneEv
cc1: error: cannot load plugin /home/atulk/test/linux-3.2.64/tools/gcc/structleak_plugin.so
/home/atulk/test/linux-3.2.64/tools/gcc/structleak_plugin.so: undefined symbol: _ZN8opt_pass5cloneEv
cc1: error: cannot load plugin /home/atulk/test/linux-3.2.64/tools/gcc/latent_entropy_plugin.so
/home/atulk/test/linux-3.2.64/tools/gcc/latent_entropy_plugin.so: undefined symbol: _Z24gt_ggc_mx_lang_tree_nodePv
cc1: error: cannot load plugin /home/atulk/test/linux-3.2.64/tools/gcc/randomize_layout_plugin.so
/home/atulk/test/linux-3.2.64/tools/gcc/randomize_layout_plugin.so: undefined symbol: _ZN8opt_pass5cloneEv
[pid 7973] +++ exited with 1 +++
[pid 7972] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7973, si_status=1, si_utime=0, si_stime=0} ---
[pid 7972] +++ exited with 1 +++
[pid 7971] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7972, si_status=1, si_utime=0, si_stime=0} ---
[pid 7971] +++ exited with 1 +++
[pid 7967] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7971, si_status=1, si_utime=0, si_stime=0} ---
make[1]: *** [kernel/bounds.s] Error 1
[pid 7967] +++ exited with 2 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7967, si_status=2, si_utime=0, si_stime=0} ---
make: *** [prepare0] Error 2
+++ exited with 2 +++
Please note that as the log was quite big so i have just sent the sample of the same.
Please let me know if you need the full log and i will send you over email.
-
atul.singh008
-
- Posts: 12
- Joined: Wed Dec 31, 2014 5:48 am
by atul.singh008 » Wed Feb 25, 2015 4:56 am
Hi Pax,
Could you please suggest me solution on the same.
Thanks in advance!
-
atul.singh008
-
- Posts: 12
- Joined: Wed Dec 31, 2014 5:48 am
by PaX Team » Sun Mar 08, 2015 7:28 pm
well, i don't really know what could be wrong in your setup since the binary does have the symbols needed by the plugins... perhaps you could try to run cc1 by hand with LD_DEBUG=libs,files,symbols,bindings and see what it says about the missing symbols.
-
PaX Team
-
- Posts: 2310
- Joined: Mon Mar 18, 2002 4:35 pm
Return to grsecurity support