Created attachment 402754 [details] emerge log * Maintainer: pinkbyte@gentoo.org netmon@gentoo.org * USE: abi_x86_64 amd64 elibc_glibc kernel_linux userland_GNU * FEATURES: preserve-libs sandbox userpriv usersandbox * Determining the location of the kernel source code * Found kernel source directory: * /usr/src/linux * Found kernel object directory: * /lib/modules/3.18.9-hardened/build * Found sources for kernel version: * 3.18.9-hardened * Checking for suitable kernel configuration options... [ ok ] >>> Unpacking source... >>> Unpacking ipt-netflow-2.1.tgz to /var/tmp/portage/net-firewall/ipt_netflow-2.1/work >>> Source unpacked in /var/tmp/portage/net-firewall/ipt_netflow-2.1/work >>> Preparing source in /var/tmp/portage/net-firewall/ipt_netflow-2.1/work/ipt-netflow-2.1 ... * Applying ipt_netflow-2.0-configure.patch ... [ ok ] >>> Source prepared. >>> Configuring source in /var/tmp/portage/net-firewall/ipt_netflow-2.1/work/ipt-netflow-2.1 ... ./configure --disable-dkms --ipt-lib=/usr/lib64/xtables --ipt-src=/usr/ --ipt-ver=1.4.21 --kdir=/usr/src/linux --kver=3.18.9-hardened --disable-snmp-agent Kernel version: 3.18.9-hardened (requested) Kernel sources: /usr/src/linux (requested) Kernel config file checked: /usr/src/linux/.config ! Attention: CONFIG_NF_CONNTRACK_EVENTS is undefined in your kernel configuration ! Without this option enabled natevents will not work. Checking for presence of include/linux/llist.h... Yes Iptables binary version: 1.4.21 (user specified) pkg-config for version 1.4.21 exists: Yes Checking for presence of xtables.h... Yes Iptables include flags: (pkg-config) Iptables module path: /usr/lib64/xtables (user specified) Creating Makefile.. done. If you need some options enabled run ./configure --help Now run: make all install >>> Source configured. >>> Compiling source in /var/tmp/portage/net-firewall/ipt_netflow-2.1/work/ipt-netflow-2.1 ... make -j1 ARCH=x86 CC=x86_64-pc-linux-gnu-gcc all Compiling for kernel 3.18.9-hardened make -C /usr/src/linux M=/var/tmp/portage/net-firewall/ipt_netflow-2.1/work/ipt-netflow-2.1 modules CONFIG_DEBUG_INFO=y make[1]: Entering directory '/usr/src/linux-3.18.9-hardened' CC [M] /var/tmp/portage/net-firewall/ipt_netflow-2.1/work/ipt-netflow-2.1/ipt_NETFLOW.o cc1: error: incompatible gcc/plugin versions cc1: error: fail to initialize plugin ./tools/gcc/colorize_plugin.so scripts/Makefile.build:263: recipe for target '/var/tmp/portage/net-firewall/ipt_netflow-2.1/work/ipt-netflow-2.1/ipt_NETFLOW.o' failed make[2]: *** [/var/tmp/portage/net-firewall/ipt_netflow-2.1/work/ipt-netflow-2.1/ipt_NETFLOW.o] Error 1 Makefile:1459: recipe for target '_module_/var/tmp/portage/net-firewall/ipt_netflow-2.1/work/ipt-netflow-2.1' failed make[1]: *** [_module_/var/tmp/portage/net-firewall/ipt_netflow-2.1/work/ipt-netflow-2.1] Error 2 make[1]: Leaving directory '/usr/src/linux-3.18.9-hardened' Makefile:24: recipe for target 'ipt_NETFLOW.ko' failed make: *** [ipt_NETFLOW.ko] Error 2 * ERROR: net-firewall/ipt_netflow-2.1::gentoo failed (compile phase): * emake failed * * If you need support, post the output of `emerge --info '=net-firewall/ipt_netflow-2.1::gentoo'`, * the complete build log and the output of `emerge -pqv '=net-firewall/ipt_netflow-2.1::gentoo'`. * The complete build log is located at '/var/log/portage/net-firewall:ipt_netflow-2.1:20150506-120715.log'. * For convenience, a symlink to the build log is located at '/var/tmp/portage/net-firewall/ipt_netflow-2.1/temp/build.log'. * The ebuild environment file is located at '/var/tmp/portage/net-firewall/ipt_netflow-2.1/temp/environment'. * Working directory: '/var/tmp/portage/net-firewall/ipt_netflow-2.1/work/ipt-netflow-2.1' * S: '/var/tmp/portage/net-firewall/ipt_netflow-2.1/work/ipt-netflow-2.1' The log is stored in /var/log/portage/_emerge_20150506-140722.log quick search: https://bugs.gentoo.org/buglist.cgi?quicksearch=net-firewall%2Fipt_netflow Maintainer : pinkbyte@gentoo.org netmon@gentoo.org maintainer : pinkbyte@gentoo.org herd : netmon This is an stable amd64 chroot image (named amd64-hardened-stable_20150501-140255) at a hardened host acting as a tinderbox. Portage 2.2.18 (python 2.7.9-final-0, hardened/linux/amd64, gcc-4.8.4, glibc-2.20-r2, 3.19.6-hardened-r2 x86_64) ================================================================= System uname: Linux-3.19.6-hardened-r2-x86_64-Intel-R-_Core-TM-_i7-3770_CPU_@_3.40GHz-with-gentoo-2.2 KiB Mem: 16164756 total, 2307308 free KiB Swap: 0 total, 0 free Timestamp of repository gentoo: Wed, 06 May 2015 11:15:01 +0000 sh bash 4.2_p53 ld GNU ld (Gentoo 2.24 p1.4) 2.24 app-shells/bash: 4.2_p53::gentoo dev-java/java-config: 2.2.0::gentoo dev-lang/perl: 5.20.2::gentoo dev-lang/python: 2.7.9-r1::gentoo, 3.3.5-r1::gentoo dev-util/cmake: 2.8.12.2-r1::gentoo dev-util/pkgconfig: 0.28-r2::gentoo sys-apps/baselayout: 2.2::gentoo sys-apps/openrc: 0.13.11::gentoo sys-apps/sandbox: 2.6-r1::gentoo sys-devel/autoconf: 2.13::gentoo, 2.69::gentoo sys-devel/automake: 1.9.6-r4::gentoo, 1.10.3-r1::gentoo, 1.11.6-r1::gentoo, 1.12.6::gentoo, 1.13.4::gentoo sys-devel/binutils: 2.24-r3::gentoo sys-devel/gcc: 4.8.4::gentoo sys-devel/gcc-config: 1.7.3::gentoo sys-devel/libtool: 2.4.6::gentoo sys-devel/make: 4.1-r1::gentoo sys-kernel/linux-headers: 3.18::gentoo (virtual/os-headers) sys-libs/glibc: 2.20-r2::gentoo Repositories: local location: /usr/local/portage masters: gentoo gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://rsync.gentoo.org/gentoo-portage priority: 9999 ACCEPT_KEYWORDS="amd64" ACCEPT_LICENSE="*" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=native -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt /var/lib/hsqldb" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.5/ext-active/ /etc/php/cgi-php5.5/ext-active/ /etc/php/cli-php5.5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=native -O2 -pipe" DISTDIR="/var/tmp/distfiles" EMERGE_DEFAULT_OPTS="--nospinner --tree --quiet-build" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://ftp.uni-erlangen.de/pub/mirrors/gentoo rsync://mirror.netcologne.de/gentoo/ ftp://sunsite.informatik.rwth-aachen.de/pub/Linux/gor.bytemark.co.uk/gentoo/ rsync://ftp.snt.utwente.nl/gentoo" LANG="en_US.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j1" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" USE="X acl aes-ni alsa amd64 apache2 avx avx2 berkdb bzip2 cairo cli corefonts cracklib crypt cups cxx dbus designer dnssec dot dri drmkms dvd ecc extraengine ffmpeg fontconfig fortran fpm gd gdbm gif gtk gudev gui hardened iconv icu isag jadetex jpeg justify kvm lapack libkms libvirtd logrotate mbox minizip mmx mmxext modules multilib mysql ncurses nls nptl ogg opengl openmp openssl pam pax_kernel pcre pcre16 plasma png policykit pwquality python qemu qt3support readline scrpyt sdl session spice sqlite sse sse2 sse4 sse4_1 sse4_2 ssh-askpass ssl ssse3 svg tcpd theora thinkpad threads tk tls truetype uml unicode urandom usb usbredir uxa v4l v4l2 video vorbis xa xattr xkb xmp xscreensaver xslt xtpax xvfb xvmc zenmap zlib" ABI_X86="64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSI ONS="presenter-console presenter-minimizer" LINGUAS="en en_GB" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_3" RUBY_TARGETS="ruby19 ruby20" USERLAND="GNU" VIDEO_CARDS="fbdev glint intel mach64 mga nouveau nv r128 radeon savage sis tdfx trident vesa via vmware dummy v4l" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON
Compiler, that you used to compile the kernel itself is different than you using to compile ipt_netflow. Most of the out-of-tree kernel modules should be compiled with EXACT the same version of compiler that used to compile the kernel itself on HARDENED systems. Please, recompile the whole kernel(run make clean first) and try again Closing as INVALID.
(In reply to Sergey Popov from comment #1) > Compiler, that you used to compile the kernel itself is different than you > using to compile ipt_netflow. Most of the out-of-tree kernel modules should > be compiled with EXACT the same version of compiler that used to compile the > kernel itself on HARDENED systems. > > Please, recompile the whole kernel(run make clean first) and try again > > Closing as INVALID. ick, I checked that - but overlooked the timestamp from qlop - sry.
This is probably a duplicate of one of a handful of other bug reports you filed.
(In reply to Jeroen Roovers from comment #3) > This is probably a duplicate of one of a handful of other bug reports you > filed. In fact, it was a script error here which skipped the rebuild of an installed kernel after a gcc upgrade.
Created attachment 443532 [details] emerge-info.txt hhm, the kernel was build after gcc was upgraded to 5.4 so why dowes this bug occured again ?
Created attachment 443534 [details] emerge-history.txt
Created attachment 443536 [details] environment
Created attachment 443538 [details] net-firewall:ipt_netflow-2.2:20160816-200501.log
Still can not reproduce this. Remember that this error can happen on any external module and thus - it is not ipt_netflow specific So, rebuild you kernel, rebuild ipt_netflow module and if this happens again - file bug about this to hardened guys Most of this errors that i encountered with was exact what this error says - kernel build with diffirent version of gcc. I am not sure about influence of gcc's USE-flags on this situation though. So this error may(as i said - i am not sure) happen even if you rebuild same gcc version with different USE-flags set.
(In reply to Sergey Popov from comment #9) my misunderstanding. I was already aware that a major gcc upgrade need a kernel rebuild, but even 4.9.3->4.9.4 triggered this. Sry for the noise
