grsecurity forums

by **hanno** » Tue Sep 12, 2006 9:07 am

schokokeks linux-2.6.17.13 # LC_ALL="C" make
CHK include/linux/version.h
CHK include/linux/compile.h
UPD include/linux/compile.h
CC init/version.o
LD init/built-in.o
CC fs/binfmt_elf.o
fs/binfmt_elf.c: In function `load_elf_interp':
fs/binfmt_elf.c:379: error: `load_addr_set' undeclared (first use in this function)
fs/binfmt_elf.c:379: error: (Each undeclared identifier is reported only once
fs/binfmt_elf.c:379: error: for each function it appears in.)
fs/binfmt_elf.c:326: warning: unused variable `min_addr'
fs/binfmt_elf.c:326: warning: unused variable `max_addr'
fs/binfmt_elf.c:326: warning: unused variable `task_size'
fs/binfmt_elf.c: In function `load_elf_binary':
fs/binfmt_elf.c:728: warning: unused variable `task_size'
make[1]: *** [fs/binfmt_elf.o] Error 1
make: *** [fs] Error 2

Can you update the patch for .13?

by **tosh** » Tue Sep 12, 2006 1:49 pm

Hello.
I have the same error with 2.6.17.13.

by **mbarbos** » Wed Sep 13, 2006 9:34 am

Might that be because patching fails :-?

Looks like a new version is needed for 2.6.17.13

by **Hal9000** » Fri Sep 15, 2006 10:52 am

use the 2.6.17.11 kernel

by **ixion** » Sat Sep 23, 2006 9:28 am

I have the same error (Debian System) with kernel 2.6.17.11

If I disable support for ELF binaries in the kernel it compiles fine... but that shouldn't be right?

edit:
This is with PaX enabled... I've tried with both direct and hook MAC Integration... also tried with legacy ELF and the newer paxctl ELF Headers... nogo all times. Appears to be a Debian-specific problem?

by **tosh** » Sat Sep 23, 2006 1:45 pm

Haven't noticed this ;-)

but this is why 2.6.17.13 do not compile (as mbarbos pointed out).
Output from patch command:

Code: Select all: 3 out of 20 hunks FAILED -- saving rejects to file fs/binfmt_elf.c.rej

by **ixion** » Sat Sep 23, 2006 1:55 pm

I grabbed a kernel.org 2.6.17.11 and it compiled without a hitch.. Must be a Debian issue.

I was able to still use 'fakeroot make-kpkg' and use the resulting .deb package without issues...

granted, I haven't booted to it yet, but things look promising..

by **harry** » Thu Oct 05, 2006 3:16 am

heya all,

there seem to be a lot of people who want a grsecurity for 2.6.17.13 kernels (like myself

) so i put up a grsec patch for that kernel:
http://people.linux-vserver.org/~harry/ ... 0150.patch

it fixes the binfmt_elf.c patchfailure.
how?:
analysing the diff between 2.6.17 and 2.6.18 and the patch pipacs made. then putting it all together in a way that we get a 2.6.17 kernel, with pax features on it (since binfmt_elf.c doesn't have any grsecurity stuff

)

greetz, and let me know if it's good/not good/disaster

(i'm running it for over 2 weeks now, on 3 machines, without any problems)

grsecurity forums

2.6.17.13 compile failure

2.6.17.13 compile failure

2.6.17.13 compilation failure

grsecurity patch for 2.6.17.13