Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 588068 - sys-kernel/hardened-sources-4.6.4 - fails to boot with PAX_KERNEXEC disabled (BUG: unable to handle kernel paging request)
Summary: sys-kernel/hardened-sources-4.6.4 - fails to boot with PAX_KERNEXEC disabled ...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Anthony Basile
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-07-05 12:36 UTC by Alexander Tsoy
Modified: 2016-07-19 17:50 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
kernel log (kernel.log,4.88 KB, text/plain)
2016-07-05 12:36 UTC, Alexander Tsoy
Details
config-4.5.7-hardened-r7 (config-4.5.7-hardened-r7,105.70 KB, text/plain)
2016-07-05 12:37 UTC, Alexander Tsoy
Details
kernel log (4.6.4) (kernel.log,4.86 KB, text/plain)
2016-07-18 22:54 UTC, Alexander Tsoy
Details
kernel-config.diff (kernel-config.diff,1.25 KB, text/plain)
2016-07-18 23:25 UTC, Alexander Tsoy
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Alexander Tsoy 2016-07-05 12:36:58 UTC
Created attachment 439782 [details]
kernel log

hardened-sources-4.5.7-r7 (grsecurity-3.1-4.5.7-201606302132) fails to boot with CONFIG_GRKERNSEC disabled. See attached kernel log and kernel config.

hardened-sources-4.5.7-r5 (grsecurity-3.1-4.5.7-201606280009) boots fine.
Comment 1 Alexander Tsoy 2016-07-05 12:37:32 UTC
Created attachment 439784 [details]
config-4.5.7-hardened-r7
Comment 2 Anthony Basile gentoo-dev 2016-07-16 03:13:35 UTC
hardened-sources-4.5.7-r7 is off the tree.   4.5.7-r5 is the next stabilization candidate.
Comment 3 Alexander Tsoy 2016-07-18 22:54:53 UTC
Created attachment 441050 [details]
kernel log (4.6.4)
Comment 4 Alexander Tsoy 2016-07-18 22:55:42 UTC
Exactly the same issue with 4.6.4
Comment 5 Anthony Basile gentoo-dev 2016-07-18 23:01:13 UTC
(In reply to Alexander Tsoy from comment #4)
> Exactly the same issue with 4.6.4

okay passing it upstream.
Comment 6 Alexander Tsoy 2016-07-18 23:25:57 UTC
Created attachment 441052 [details]
kernel-config.diff

Attaching diff between working and crashing kernels. So it looks like disabled CONFIG_PAX_KERNEXEC is the culprit?
Comment 7 PaX Team 2016-07-18 23:37:50 UTC
you should try the next patch that spender will release soon as i completely reworked how KERNEXEC coexists with upstream's now always enabled DEBUG_RODATA feature. if you still have problems with it, let me know.
Comment 8 Alexander Tsoy 2016-07-19 13:41:34 UTC
This was fixed in 4.6.4-r1 (grsecurity-3.1-4.6.4-201607182211)