Error: 2.6.24.2 + grsecurity-2.1.11-2.6.24.2-200802142000

[Tommy]

CC arch/x86/kernel/i386_ksyms_32.o
arch/x86/kernel/i386_ksyms_32.c:38: error: 'KERNEL_TEXT_OFFSET' undeclared here (not in a function)
arch/x86/kernel/i386_ksyms_32.c:38: warning: type defaults to 'int' in declaration of 'KERNEL_TEXT_OFFSET'
make[1]: *** [arch/x86/kernel/i386_ksyms_32.o] Error 1
make: *** [arch/x86/kernel] Error 2

My config: http://rafb.net/p/vFPNpx31.html

[PaX Team]

CC arch/x86/kernel/i386_ksyms_32.o
arch/x86/kernel/i386_ksyms_32.c:38: error: 'KERNEL_TEXT_OFFSET' undeclared here (not in a function)

fixed in test20, you can apply the interdiff since test19 to grsec or wait for spender. or just enable KERNEXEC which is the safer option anyway .

[shh]

Exactly the same problem here:
2.6.24.2 + grsecurity-2.1.11-2.6.24.2-200802142000

> fixed in test20

http://www.grsecurity.net/test.php shows -test19 as latest.
Where do we get the actual test20 version? You're talking about a pax-linux-2.6.24.2-test20.patch, right?

> or just enable KERNEXEC which is the safer option anyway

Where's that option to find? I cannot find any similar in the .config file.

[memus]

fixed in test20, you can apply the interdiff since test19 to grsec or wait for spender.

And where can i find it ? on http://grsecurity.net/~spender i found the same like on the test page.

[PaX Team]

> fixed in test20

http://www.grsecurity.net/test.php shows -test19 as latest.
Where do we get the actual test20 version? You're talking about a pax-linux-2.6.24.2-test20.patch, right?

yes, and it's always in my own http://www.grsecurity.net/~paxguy1/ until spender's test page picks it up (it's not real time).

> or just enable KERNEXEC which is the safer option anyway

Where's that option to find? I cannot find any similar in the .config file.

you must have enabled COMPAT_VDSO or something like PARAVIRT which aren't compatible with KERNEXEC.

[shh]

you must have enabled COMPAT_VDSO or something like PARAVIRT which aren't compatible with KERNEXEC.

No, none of that options were turned on.
But the new patch (2.1.11-2.6.24.2-200802151749.patch) works fine on kernel 2.6.24.2!

Code: Select all

booman@server:/home/share$ ./exploit
-----------------------------------
 Linux vmsplice Local Root Exploit
 By qaaz
-----------------------------------
[+] mmap: 0x0 .. 0x1000
[+] page: 0x0
[+] page: 0x20
[+] mmap: 0x4000 .. 0x5000
[+] page: 0x4000
[+] page: 0x4020
[+] mmap: 0x1000 .. 0x2000
[+] page: 0x1000
[+] mmap: 0xae4f4000 .. 0xae526000
[-] vmsplice: Bad address
booman@server:/home/share$


Many thanks for the support!