Coder Social home page Coder Social logo

linux-grsec's People

Contributors

ingobecker avatar macleod2486 avatar nning avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar

linux-grsec's Issues

-fstack-protector-strong not supported by compiler

Despite gcc not protesting when compiling a sample program with the option -fstack-protector-strong, while building linux-grsec it complains about the aforementioned option.

Same happens when building from Arch Linux community repository.

I don't know if I didn't realize it before or if it's a new error.

This issue refers (at least) to 0d6b88f (linux 4.5.7, grsec 3.1/201606110914).

patching file tools/virtio/linux/uaccess.h
patching file virt/kvm/kvm_main.c
  HOSTCC  scripts/basic/fixdep
  HOSTCC  scripts/kconfig/conf.o
  SHIPPED scripts/kconfig/zconf.tab.c
  SHIPPED scripts/kconfig/zconf.lex.c
  SHIPPED scripts/kconfig/zconf.hash.c
  HOSTCC  scripts/kconfig/zconf.tab.o
  HOSTLD  scripts/kconfig/conf
scripts/kconfig/conf  --silentoldconfig Kconfig
Makefile:679: Cannot use CONFIG_CC_STACKPROTECTOR_STRONG: -fstack-protector-strong not supported by compiler

More of a question than an issue

I've been building my own grsecurity kernel for about a year that I forked from you.

Since ~4.8.10 or so, I've had regular boot issues. In particular, issues with systemd-logind repeatedly mounting and unmounting a tmpfs, then failing. After doing so thousands of times, it eventually failed and the computer hangs. I tried installing your precompiled package from the repos, and it booted fine. I then basically started moving my config closer to yours in groups of ~10-20 flags at a time. In the end, it seemed more random than anything. Some would boot, some wouldn't. My last one from the 22 Feb patchset booted, with all of my config switches identical to yours save a few in the grsecurity patch set. Now, in the 5 March patch, I once again cannot boot.

I've already reached out on the grsecurity forums, but since many users are on gentoo and other distros, I thought I'd see if you've had any similar issues and/or any advice.

Thanks so much for your time!
Scott

Error with Virtualbox and VM with VT-x enabled

Hello,

I'm not sure if this is the right place to ask.
I installed linux-grsec, added pax_nouderef as a kernel parameter because I have a sandybridge cpu and it wouldn't boot otherwise.
Besides that I didn't change anything else.
Everything works fine except from VirtualBox where the application itself starts but if I try to start a VM that has the VT-x acceleration enabled in its settings it will throw the error pasted bellow. If I disable VT-x it starts fine but of course works much slower.
Am I doing something wrong?

I tried setfattr -n user.pax.flags -v "mr" /usr/lib/virtualbox/VirtualBox as well but that didn't change anything.

Cheers and thx for maintaining the packet :)

Error:

    VirtualBox VM 4.3.18_OSE r96516 linux.amd64 (Oct 11 2014 19:11:11) release log
00:00:00.236536 Log opened 2014-11-20T20:15:25.445710000Z
00:00:00.236537 Build Type: release
00:00:00.236540 OS Product: Linux
00:00:00.236541 OS Release: 3.17.3.201411150027-1-grsec
00:00:00.236542 OS Version: #1 SMP PREEMPT Sun Nov 16 04:44:52 EST 2014
00:00:00.236798 Host RAM: 11716MB total, 10421MB available
00:00:00.236800 Executable: /usr/lib/virtualbox/VirtualBox
00:00:00.236800 Process ID: 20185
00:00:00.236801 Package type: LINUX_64BITS_GENERIC (OSE)
00:00:00.276515 Installed Extension Packs:
00:00:00.276553   None installed!
00:00:00.289405 SUP: Loaded VMMR0.r0 (/usr/lib/virtualbox/VMMR0.r0) at 0xffffffffc0cdc020 - ModuleInit at ffffffffc0cfa520 and ModuleTerm at ffffffffc0cfa830
00:00:00.289439 SUP: VMMR0EntryEx located at ffffffffc0cfba50, VMMR0EntryFast at ffffffffc0cfb5d0 and VMMR0EntryInt at ffffffffc0cfb5c0
00:00:00.292329 UIMediumEnumerator: Medium-enumeration finished!
00:00:00.292653 Using XKB for keycode to scan code conversion
00:00:00.294169 Guest OS type: 'Ubuntu'
00:00:00.309103 fHMForced=true - 64-bit guest
00:00:00.325721 File system of '......./Snapshots' (snapshots) is ext4
00:00:00.325740 File system of '.......disk1.vmdk' is ext4
00:00:00.355687 Shared clipboard mode: Off
00:00:00.356239 Drag'n'drop mode: Off
00:00:14.156025 VUSB: detached 'HidMouse' from port 1
00:00:14.156575 VMSetError: /build/virtualbox/src/VirtualBox-4.3.18/src/VBox/VMM/VMMR3/MM.cpp(673) int MMR3AdjustFixedReservation(PVM, int32_t, const char*); rc=VERR_VMM_SET_JMP_ABORTED_RESUME
00:00:14.156590 VMSetError: Failed to reserve physical memory (0x1c04 -> 0x1c00; VMMDev Heap)
00:00:14.157200 VMSetError: /build/virtualbox/src/VirtualBox-4.3.18/src/VBox/VMM/VMMR3/MM.cpp(673) int MMR3AdjustFixedReservation(PVM, int32_t, const char*); rc=VERR_VMM_SET_JMP_ABORTED_RESUME
00:00:14.157212 VMSetError: Failed to reserve physical memory (0x1c04 -> 0x1804; VMMDev)
00:00:14.160899 VMSetError: /build/virtualbox/src/VirtualBox-4.3.18/src/VBox/VMM/VMMR3/MM.cpp(673) int MMR3AdjustFixedReservation(PVM, int32_t, const char*); rc=VERR_VMM_SET_JMP_ABORTED_RESUME
00:00:14.160912 VMSetError: Failed to reserve physical memory (0x1c04 -> 0x404; VRam)
00:00:14.165222 NAT: zone(nm:mbuf_cluster, used:0)
00:00:14.165964 NAT: zone(nm:mbuf_packet, used:0)
00:00:14.165985 NAT: zone(nm:mbuf, used:0)
00:00:14.165990 NAT: zone(nm:mbuf_jumbo_pagesize, used:0)
00:00:14.166823 NAT: zone(nm:mbuf_jumbo_9k, used:0)
00:00:14.167539 NAT: zone(nm:mbuf_jumbo_16k, used:0)
00:00:14.167978 NAT: zone(nm:mbuf_ext_refcnt, used:0)
00:00:14.221142 VMMR3Term: R0 term failed, rc=VERR_VMM_SET_JMP_ABORTED_RESUME (-2708) - VMM set jump resume error.. (warning)
00:00:14.221759 Changing the VM state from 'DESTROYING' to 'TERMINATED'.
00:00:14.454518 UIMachineView::storeGuestSizeHint: Storing guest size-hint for screen 0 as 640x480

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.