Welcome to the Community Site!

You've been redirected here from forum.linode.com. This is your new place to find answers, ask questions, and help others.

Join our Community
X

Unable to boot with hardened-sources

Good afternoon.

I've successfully set up my Linode box, except in that I haven't been able to boot with my own kernel, built from Gentoo's hardened-sources.

The following occurs when trying to boot:

–-----

backend at /local/domain/0/backend/vbd/142/51728

Booting 'Gentoo Linux 2.6.28-hardened-r9proyectosolana (x86_64)'

root (hd0)

Filesystem type is ext2fs, using whole disk

kernel /boot/kernel-proyectosolana-x86_64-2.6.28-hardened-r9proyectosolana root

=/dev/ramdisk real_root=/dev/xvda selinux=0

initrd /boot/initramfs-proyectosolana-x86_64-2.6.28-hardened-r9proyectosolana

close blk: backend at /local/domain/0/backend/vbd/142/51712

close blk: backend at /local/domain/0/backend/vbd/142/51728

close blk: backend at /local/domain/0/backend/vbd/142/51744

close blk: backend at /local/domain/0/backend/vbd/142/51760

close blk: backend at /local/domain/0/backend/vbd/142/51776

close blk: backend at /local/domain/0/backend/vbd/142/51792


The kernel is the 'hardened-sources', that comes with Gentoo Linux. In case you aren't aware, this kernel comes with SELinux and grsecurity patches, so it enables extra security features not available in vanilla sources. The .config file I've used is available at http://0xj.info/config.txt.gz

Thanks in advance.

2 Replies

Well, I'm going to reply to myself.

After some tries, I've finally been able to boot 2.6.33-hardened.

For those interested, the config file may be found at http://0xj.info/config.gz

Apparently, the trouble was related to some memory protection options.

Hello,

Thank you for providing the information. Can you be more specific which memory protection (preferably the CONFIG_WHATEVER) line needs to be turned off?

I took your .config file and did an oldconfig with 2.6.35-hardened-r2 but no joy.

This is what happens, and then the system turns off. /boot/CURRENT is a symlink to the hardened kernel, I just re-point the symlink at whatever kernel I want so I don't have to mess with grub every time.

root (hd0)

Filesystem type is ext2fs, using whole disk

kernel /boot/CURRENT root=/dev/xvda ro quiet single

Map 2048 (7e7b75, …) at 0x41802000 failed: -22.

Do_exit called!

base is 0xd37b98 caller is 0x45a60

base is 0xd37bc8 caller is 0x4f3f7

base is 0xd3fc18 caller is 0x4f561

base is 0xd3fc58 caller is 0x353dd

base is 0xd3fc98 caller is 0x27183

base is 0xd3fcd8 caller is 0x25b3e

base is 0xd3fd18 caller is 0x25eba

base is 0xd3fd78 caller is 0x267a6

base is 0xd3fdc8 caller is 0x17f64

base is 0xd3fe38 caller is 0x36a3

base is 0xd3fe58 caller is 0x5e09

base is 0xd3fe68 caller is 0xa446

base is 0xd3fe88 caller is 0x10204

base is 0xd3fef8 caller is 0x107d1

base is 0xd3ff68 caller is 0x3f2b

base is 0xd3ffa0 caller is 0x4608a

base is 0xd3fff0 caller is 0x31ad

This is a tricky issue and there is essentially no information to be found on resolving it. I'll send this in a private message too just to be sure.

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct