Bug 448872

Summary:	When ima_appraisal_tcb is enabled, system oops'es in bootmisc
Product:	Gentoo Linux	Reporter:	Sven Vermeulen (RETIRED) <swift>
Component:	Hardened	Assignee:	Sven Vermeulen (RETIRED) <swift>
Status:	RESOLVED WORKSFORME
Severity:	normal	CC:	hardened-kernel+disabled
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	integrity
Package list:		Runtime testing required:	---
Attachments:	Kernel oops

Description Sven Vermeulen (RETIRED) gentoo-dev

2012-12-27 16:24:43 UTC

In the /etc/init.d/bootmisc file, the following activity is ran that generates an OOPS in the kernel (3.7-hardened):

"""
dmesg > /var/log/dmesg
"""

Running 'dmesg > /tmp/dmesg' doesn't trigger the oops, nor does moving /tmp/dmesg to /var/log/dmesg. Commenting out the activity (or replacing it with the following excerpt) makes the system behave as needed (no oops).

"""
dmesg > /tmp/dmesg
mv /tmp/dmesg /var/log/dmesg
chcon -t var_log_t /var/log/dmesg
"""

Oops will be attached.

Reproducible: Always

Comment 1 Sven Vermeulen (RETIRED) gentoo-dev

2012-12-27 16:25:16 UTC

Created attachment 333488 [details]
Kernel oops

Comment 2 Sven Vermeulen (RETIRED) gentoo-dev

2012-12-27 16:25:49 UTC

@hardened-kernel team: adding you in Cc just in case it reminds you of something

Comment 3 Sven Vermeulen (RETIRED) gentoo-dev

2014-06-01 12:09:31 UTC

Doesn't come up anymore