As in logs (to attach as file later) X seems to start correctly but only off the screen and if I try to stop with ctr+backspace the system crash and remain locked; by ssh for some minutes I can access and there are nothing reported. This will be with hardened-sources-2.6.25-r7 and ati drivers 8.512 or with hardened-sources-2.6.26-r2 and ati-drivers 8.512. The ati-drivers-8.501 package can be compiled but fails with multiple linking errors (and the build report unresoved simbols) The problem can be referred to the updates occured in the last month. With Noaccel and NoDRI X start and work without problems. Ask me for more details or information if needed. The raden driver is unable to work also, with or without acceleration Reproducible: Always Steps to Reproduce: My emerge info PSYCO: OK Portage 2.1.4.4 (hardened/linux/x86, gcc-3.4.6, glibc-2.6.1-r0, 2.6.26-hardened-r2 i686) ================================================================= System uname: 2.6.26-hardened-r2 i686 Mobile AMD Athlon(tm) 64 Processor 3400+ Timestamp of tree: Mon, 22 Sep 2008 10:45:01 +0000 app-shells/bash: 3.2_p33 dev-java/java-config: 1.3.7, 2.1.6 dev-lang/python: 2.5.2-r7 sys-apps/baselayout: 1.12.11.1 sys-apps/sandbox: 1.2.18.1-r2 sys-devel/autoconf: 2.13, 2.61-r2 sys-devel/automake: 1.4_p6, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.1-r1 sys-devel/binutils: 2.18-r3 sys-devel/gcc-config: 1.4.0-r4 sys-devel/libtool: 1.5.26 virtual/os-headers: 2.6.23-r3 ACCEPT_KEYWORDS="x86" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -march=athlon-xp -fforce-addr -fomit-frame-pointer -pipe" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/lib/fax /usr/share/config /var/spool/fax/etc" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo /etc/udev/rules.d" CXXFLAGS="-O2 -march=athlon-xp -fforce-addr -fomit-frame-pointer -pipe" DISTDIR="/usr/portage/pkg/distfiles" EMERGE_DEFAULT_OPTS="--color y --with-bdeps y" FEATURES="distlocks metadata-transfer notitles sandbox sfperms strict unmerge-orphans userfetch" GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo" LDFLAGS="-Wl,-O1 -Wl,--as-needed" LINGUAS="it en" MAKEOPTS="-j2" PKGDIR="/usr/portage/pkg/packages" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage/gentoo" PORTDIR_OVERLAY="/usr/portage/local /usr/portage/gechi" SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage" USE="7zip X X509 a52 aac ace acl acpi ads alisp alsa amr amrnb amrwb aotuv apache2 async audit authz_host automount bash-completion bdf berkdb big-tables binfilter blender-game bluetooth branding bzip2 cairo caps cdda cddb cdio cdparanoia chroot cjk clearcase cli colordiff connectionstatus contactnotes cpudetection cracklib crypt cups custom-cflags cvs daemon dbus deprecated device-mapper dga directfb djvu dri dts dv dvb dvd enca encode exif expat extensions extraengine fax faxonly fbcon ffmepg ffmpeg flac ftp gd gdbm ggi gif gimp glib glibc-compat20 glibc-omitfp glitz gnutls gpm gs gtk hal hardened hdri highlight history hpn iconv icu idea idn immqt-bc ipv6 irc isdnlog java java6 javascript jbig jfs jpeg jpeg2k kde lcms ldap legacyssl libgcrypt libssh2 live logrotate lzo mailwrapper matroska max-idx-128 mbrola md5sum midi mmx mmxect mmxext mng modplug mono motif mp2 mp3 mpeg mudflap musepack mysql ncurses nemesi network nfs nis nls none nowlistening nptl nptlonly nsplugin ntfs odbc odk ogg openexr opengl openssl opensslcrypt optimisememory overlays pam paste64 pcre pcsc-lite pda pdf perforce perl pg-intdatetime php pic plugins png postgres ppds pppd python q32 qt3support qt4 quicktime quotas rar readline real reflection reiserfs remote rle rpc rtsp ruby samba scanner sdl sensord server session shout skins slp smartcard smbkrb5passwd sms sockets speex spell spl sql sqlite srt sse sse2 sse3 ssl ssse3 stream subversion svg sysfs syslog tcl tcpd theora threads tiff tk tools translator truetype unicode urandom usb utils vcd vda vhost_alias vhosts vidix vim-pager vim-syntax vorbis webpresence wifi win32codecs winbind wmf wxwindows x264 x86 xcb xcomposite xfs xft xinerama xinetd xml xmlreader xmlwriter xorg xscreensaver xulrunner xv xvid xvmc zlib zoran" ALSA_CARDS="hda-intel intel8x0 intel8x0m" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="evdev keyboard mouse vmmouse synaptics joystick" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="it en" USERLAND="GNU" VIDEO_CARDS="none fglrx" Unset: CPPFLAGS, CTARGET, FFLAGS, INSTALL_MASK, LANG, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS and this is the hardware detected: 01:05.0 VGA compatible controller: ATI Technologies Inc Radeon XPRESS 200M 5955 (PCIE) (prog-if 00 [VGA controller]) Subsystem: Mitac Device 8317 Flags: bus master, 66MHz, medium devsel, latency 255, IRQ 17 Memory at 90000000 (32-bit, prefetchable) [size=256M] I/O ports at c000 [size=256] Memory at c0000000 (32-bit, non-prefetchable) [size=64K] [virtual] Expansion ROM at c0020000 [disabled] [size=128K] Capabilities: [50] Power Management version 2 Kernel driver in use: fglrx_pci Kernel modules: fglrx
Created attachment 166117 [details] X.0.log
Created attachment 166119 [details] kernel configuration 2.6.25
This is what I have catch from console report of X: hostname: Unknown host xauth: creating new authority file /root/.serverauth.4235 X Window System Version 1.3.0 Release Date: 19 April 2007 X Protocol Version 11, Revision 0, Release 1.3 Build Operating System: UNKNOWN Current Operating System: Linux djinnZ 2.6.26-hardened-r2 #2 PREEMPT Mon Sep 22 19:14:53 CEST 2008 i686 Build Date: 20 September 2008 Before reporting problems, check http://wiki.x.org to make sure that you have the latest version. Module Loader present Markers: (--) probed, (**) from config file, (==) default setting, (++) from command line, (!!) notice, (II) informational, (WW) warning, (EE) error, (NI) not implemented, (??) unknown. (==) Log file: "/var/log/Xorg.0.log", Time: Mon Sep 22 20:11:31 2008 (==) Using config file: "/etc/X11/xorg.conf" (II) Module already built-in (II) Module already built-in waiting for X server to begin accepting connections . giving up. xinit: Connection refused (errno 111): unable to connect to X server xinit: No such process (errno 3): Server error.
Created attachment 166122 [details] kernel configuration 2.6.26
Created attachment 166124 [details] X configuration
Does an older version of the driver work on hardened?
(In reply to comment #6) > Does an older version of the driver work on hardened? 8.501 report simbols mismatch at compile time and fail to start complete. I have do a complete rebuild of the system (erased by an error of mine, so I can not punctually report the version of the last working configuration, excuse me for it) but it was working with the same configuration (but with CONFIG_PAX_KERNEXEC=y in kernel, now enable this option cause a complete crash of the laptop) last month (I do daily or at last weekly updates, until 12. of august all was working). There are only one or two revision in the xorg tree and in the kernels update between the working version and the actual. In some try I have see (sometimes, not ever) the message "[fglrx] GART Table is not in FRAME_BUFFER range" in the logs and I have also try to start X from gdb but there are no message or errors reported. Also I have try to rebuild xorg, driver and mesa without LDFLAGS and CFLAGS="-O2 -march=athlon-xp -pipe" only with same resultate. The laptop use the same identical configuration of my server (It has only an old mga G400 so differs in X and an athlon processor, but seems to work fine without any error with a regular uptime of 12h for day) and I think than build errors in base packages can be excluded. Any suggestion to force the driver to report an error?
(In reply to comment #7) Apologize me for repost but I have forgive to confirm than X -probeonly end without errors.
up with some (bad) news: I was be able to start fglrx with acceleration enabled. Because I am thinking about a library conflict more than an incompatibily between hardening and fglrx or hardware issues, I have start to eradicate possible causes. I have removed the ati drivers (with manual remove of symlinks also reported in bug #238686) and deactivate the motif use (and removed also the openmosix library after mesa rebuild) and I have unintentionally activated video_cards_radeon only for mesa. With ati drivers 8.522 and kernel 2.6.25 and NoAccel and NoDRI commented in xorg.conf i have started X with acceleration (also reported by logs and ati control panel) so I can exclude hardware problems. After them I have refined the kernel configuration (in the net configuration, pax and grsec are identical) and I have rebuild the system and the kernel (with genkernel and make mrproper activated), but by a mismatch of mine there are VIDEO_CARDS="radeon" in make.conf. After the wrong rebuild I have also removed x86-video-radeon driver, rebuild xorg mesa and ati drivers by change in make.conf but the system another time is unable to start X with acceleration. I have also rebuild all drivers proto and base X library without results, removed everything not owned by packages in /usr/lib. I am thinking about a mismached link versus mesa native library in subsition of fglrx library or on a package conflict not reported (some files substituted by error or not updated for any reason). Sure remove all X packages and rebuild entire system is not a solution.
There are multiple cause but I think to have found (and partially resolved) all problems: 1 - library mismatch: is ininfluent (but easy can cause a wrong interpretation) and can be easy solved by rebuild of the mesa dependency tree. Partially related to bug 238686. 2 - kernel hardware support: the laptop AGP support must be activated by CONFIG_AGP_AMD64 with ati-drivers-8.501 and kernels until 2.6.24. With latest versions CONFIG_AGP_ATI is needed (the module is sometimes unable to start with older kernels, so I have never use it before) and the CONFIG_AGP_AMD64 must be disabled (if builtin the kernel will ever use it). Sound strange for me but seems than the fglrx module can use two agp drivers on this (bugged?) hardware. In fact having the module agpgart loaded cause the lock of the screen off at X shutdown or at console switch (ever on my hardware, sometimes on other I think). I report it only because I think will be useful to warn in the documentation (ati drivers guide). 3 - deprecated kernel symbols: This is the real problem. The fglrx module need to call the init_mm function (a deprecated symbol exported by enabling CONFIG_UNUSED_SYMBOLS). By enable or disable some option in the kernel configuration (not any of the used options for pax and grsecurity, I have ever the same limited configuration) the symbol remain exported but it not work anymore and simply X and the kernel seems not crashing, just waiting for the execution of a disabled function. I am no able to determine if this is strictly a problem of the hardened patched kernel only or the malfuncion of init_mm can affect other kernels too. Is possible than this problem can affect some versions of the nvidia driver also and any other kernel module than use init_mm. Fell free to close this bug (so I will open properly another for kernel) or to assign to someone of the hardened team in order to solve the problem. Now a little answer is needed :-)
Forget to report than I have same results with drivers versions from 8.512 to 8.532 and hardened kernels from 2.6.25-r7 to 2.6.26-r4
fglrx is not designed to work with PaX and grsec, so i mark this as CANTFIX, but if know a way to make it working _without_ disabling important PaX/grsec features, feel free to reopen or fill a new bug.
