nning / linux-grsec Goto Github PK
View Code? Open in Web Editor NEWArch Linux package for the Linux Kernel and modules with grsecurity/PaX patches.
Arch Linux package for the Linux Kernel and modules with grsecurity/PaX patches.
I've been building my own grsecurity kernel for about a year that I forked from you.
Since ~4.8.10 or so, I've had regular boot issues. In particular, issues with systemd-logind repeatedly mounting and unmounting a tmpfs, then failing. After doing so thousands of times, it eventually failed and the computer hangs. I tried installing your precompiled package from the repos, and it booted fine. I then basically started moving my config closer to yours in groups of ~10-20 flags at a time. In the end, it seemed more random than anything. Some would boot, some wouldn't. My last one from the 22 Feb patchset booted, with all of my config switches identical to yours save a few in the grsecurity patch set. Now, in the 5 March patch, I once again cannot boot.
I've already reached out on the grsecurity forums, but since many users are on gentoo and other distros, I thought I'd see if you've had any similar issues and/or any advice.
Thanks so much for your time!
Scott
Despite gcc
not protesting when compiling a sample program with the option -fstack-protector-strong
, while building linux-grsec it complains about the aforementioned option.
Same happens when building from Arch Linux community
repository.
I don't know if I didn't realize it before or if it's a new error.
This issue refers (at least) to 0d6b88f (linux 4.5.7, grsec 3.1/201606110914).
patching file tools/virtio/linux/uaccess.h
patching file virt/kvm/kvm_main.c
HOSTCC scripts/basic/fixdep
HOSTCC scripts/kconfig/conf.o
SHIPPED scripts/kconfig/zconf.tab.c
SHIPPED scripts/kconfig/zconf.lex.c
SHIPPED scripts/kconfig/zconf.hash.c
HOSTCC scripts/kconfig/zconf.tab.o
HOSTLD scripts/kconfig/conf
scripts/kconfig/conf --silentoldconfig Kconfig
Makefile:679: Cannot use CONFIG_CC_STACKPROTECTOR_STRONG: -fstack-protector-strong not supported by compiler
returns 404, please update ;)
Hello,
I'm not sure if this is the right place to ask.
I installed linux-grsec, added pax_nouderef as a kernel parameter because I have a sandybridge cpu and it wouldn't boot otherwise.
Besides that I didn't change anything else.
Everything works fine except from VirtualBox where the application itself starts but if I try to start a VM that has the VT-x acceleration enabled in its settings it will throw the error pasted bellow. If I disable VT-x it starts fine but of course works much slower.
Am I doing something wrong?
I tried setfattr -n user.pax.flags -v "mr" /usr/lib/virtualbox/VirtualBox
as well but that didn't change anything.
Cheers and thx for maintaining the packet :)
Error:
VirtualBox VM 4.3.18_OSE r96516 linux.amd64 (Oct 11 2014 19:11:11) release log
00:00:00.236536 Log opened 2014-11-20T20:15:25.445710000Z
00:00:00.236537 Build Type: release
00:00:00.236540 OS Product: Linux
00:00:00.236541 OS Release: 3.17.3.201411150027-1-grsec
00:00:00.236542 OS Version: #1 SMP PREEMPT Sun Nov 16 04:44:52 EST 2014
00:00:00.236798 Host RAM: 11716MB total, 10421MB available
00:00:00.236800 Executable: /usr/lib/virtualbox/VirtualBox
00:00:00.236800 Process ID: 20185
00:00:00.236801 Package type: LINUX_64BITS_GENERIC (OSE)
00:00:00.276515 Installed Extension Packs:
00:00:00.276553 None installed!
00:00:00.289405 SUP: Loaded VMMR0.r0 (/usr/lib/virtualbox/VMMR0.r0) at 0xffffffffc0cdc020 - ModuleInit at ffffffffc0cfa520 and ModuleTerm at ffffffffc0cfa830
00:00:00.289439 SUP: VMMR0EntryEx located at ffffffffc0cfba50, VMMR0EntryFast at ffffffffc0cfb5d0 and VMMR0EntryInt at ffffffffc0cfb5c0
00:00:00.292329 UIMediumEnumerator: Medium-enumeration finished!
00:00:00.292653 Using XKB for keycode to scan code conversion
00:00:00.294169 Guest OS type: 'Ubuntu'
00:00:00.309103 fHMForced=true - 64-bit guest
00:00:00.325721 File system of '......./Snapshots' (snapshots) is ext4
00:00:00.325740 File system of '.......disk1.vmdk' is ext4
00:00:00.355687 Shared clipboard mode: Off
00:00:00.356239 Drag'n'drop mode: Off
00:00:14.156025 VUSB: detached 'HidMouse' from port 1
00:00:14.156575 VMSetError: /build/virtualbox/src/VirtualBox-4.3.18/src/VBox/VMM/VMMR3/MM.cpp(673) int MMR3AdjustFixedReservation(PVM, int32_t, const char*); rc=VERR_VMM_SET_JMP_ABORTED_RESUME
00:00:14.156590 VMSetError: Failed to reserve physical memory (0x1c04 -> 0x1c00; VMMDev Heap)
00:00:14.157200 VMSetError: /build/virtualbox/src/VirtualBox-4.3.18/src/VBox/VMM/VMMR3/MM.cpp(673) int MMR3AdjustFixedReservation(PVM, int32_t, const char*); rc=VERR_VMM_SET_JMP_ABORTED_RESUME
00:00:14.157212 VMSetError: Failed to reserve physical memory (0x1c04 -> 0x1804; VMMDev)
00:00:14.160899 VMSetError: /build/virtualbox/src/VirtualBox-4.3.18/src/VBox/VMM/VMMR3/MM.cpp(673) int MMR3AdjustFixedReservation(PVM, int32_t, const char*); rc=VERR_VMM_SET_JMP_ABORTED_RESUME
00:00:14.160912 VMSetError: Failed to reserve physical memory (0x1c04 -> 0x404; VRam)
00:00:14.165222 NAT: zone(nm:mbuf_cluster, used:0)
00:00:14.165964 NAT: zone(nm:mbuf_packet, used:0)
00:00:14.165985 NAT: zone(nm:mbuf, used:0)
00:00:14.165990 NAT: zone(nm:mbuf_jumbo_pagesize, used:0)
00:00:14.166823 NAT: zone(nm:mbuf_jumbo_9k, used:0)
00:00:14.167539 NAT: zone(nm:mbuf_jumbo_16k, used:0)
00:00:14.167978 NAT: zone(nm:mbuf_ext_refcnt, used:0)
00:00:14.221142 VMMR3Term: R0 term failed, rc=VERR_VMM_SET_JMP_ABORTED_RESUME (-2708) - VMM set jump resume error.. (warning)
00:00:14.221759 Changing the VM state from 'DESTROYING' to 'TERMINATED'.
00:00:14.454518 UIMachineView::storeGuestSizeHint: Storing guest size-hint for screen 0 as 640x480
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.