problem chroot with lilo grsec 1.9.10

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

problem chroot with lilo grsec 1.9.10

Postby tboernert » Sat Jun 14, 2003 8:28 am

i'm using high security and no acls
if i run lilo with the "-r" options for chroot it's not working.
with versions 1.9.9h before i've no problems

can erveryone help me ?

thanks

-Thomas
tboernert
 
Posts: 9
Joined: Sat May 25, 2002 1:01 pm

Postby spender » Sat Jun 14, 2003 10:17 am

Is there anything related to grsecurity in your logs?

Nothing has changed related to the chroot code since 1.9.9h, so if it worked then, it will work with 1.9.10.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Postby tboernert » Sat Jun 14, 2003 10:28 am

there is nothing in the logs with "grsec ..."

it doesn't work also with 1.9.9h

it works with all versions to grsecurity-1.9.8-rc1-2.4.20

Thanks

Thomas
tboernert
 
Posts: 9
Joined: Sat May 25, 2002 1:01 pm

Postby spender » Sat Jun 14, 2003 10:33 am

in this chroot mode, does lilo attempt to modify a harddrive block device while chrooted? That certainly wouldn't be allowed by grsecurity.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Postby tboernert » Sat Jun 14, 2003 10:49 am

lilo has an option "-r" for chroot for writing t another harddisc drive.
i can also use the chroot-command, its the same problem

with grsec 1.9.8 rc1 it's working.

what are the changes to the actual version in this case ?
(i'm using high security as grsec kernel option and no acls)

thank you

-Thomas
tboernert
 
Posts: 9
Joined: Sat May 25, 2002 1:01 pm

Postby tboernert » Sat Jun 14, 2003 6:05 pm

OK, i've found the problem.

it's a feature not a problem.


is it possible to run lilo to a second hard discdrive without chroot ?


thanks

-Thomas
tboernert
 
Posts: 9
Joined: Sat May 25, 2002 1:01 pm

Postby tboernert » Tue Jun 17, 2003 7:09 pm

the problem is solved

it's possible to run lilo without chroot and it works fine

Thomas
tboernert
 
Posts: 9
Joined: Sat May 25, 2002 1:01 pm


Return to grsecurity support