Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 588068

Summary: sys-kernel/hardened-sources-4.6.4 - fails to boot with PAX_KERNEXEC disabled (BUG: unable to handle kernel paging request)
Product: Gentoo Linux Reporter: Alexander Tsoy <alexander>
Component: Current packagesAssignee: Anthony Basile <blueness>
Status: RESOLVED FIXED    
Severity: normal CC: hardened, kernel, pageexec, spender
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---
Attachments: kernel log
config-4.5.7-hardened-r7
kernel log (4.6.4)
kernel-config.diff

Description Alexander Tsoy 2016-07-05 12:36:58 UTC
Created attachment 439782 [details]
kernel log

hardened-sources-4.5.7-r7 (grsecurity-3.1-4.5.7-201606302132) fails to boot with CONFIG_GRKERNSEC disabled. See attached kernel log and kernel config.

hardened-sources-4.5.7-r5 (grsecurity-3.1-4.5.7-201606280009) boots fine.
Comment 1 Alexander Tsoy 2016-07-05 12:37:32 UTC
Created attachment 439784 [details]
config-4.5.7-hardened-r7
Comment 2 Anthony Basile gentoo-dev 2016-07-16 03:13:35 UTC
hardened-sources-4.5.7-r7 is off the tree.   4.5.7-r5 is the next stabilization candidate.
Comment 3 Alexander Tsoy 2016-07-18 22:54:53 UTC
Created attachment 441050 [details]
kernel log (4.6.4)
Comment 4 Alexander Tsoy 2016-07-18 22:55:42 UTC
Exactly the same issue with 4.6.4
Comment 5 Anthony Basile gentoo-dev 2016-07-18 23:01:13 UTC
(In reply to Alexander Tsoy from comment #4)
> Exactly the same issue with 4.6.4

okay passing it upstream.
Comment 6 Alexander Tsoy 2016-07-18 23:25:57 UTC
Created attachment 441052 [details]
kernel-config.diff

Attaching diff between working and crashing kernels. So it looks like disabled CONFIG_PAX_KERNEXEC is the culprit?
Comment 7 PaX Team 2016-07-18 23:37:50 UTC
you should try the next patch that spender will release soon as i completely reworked how KERNEXEC coexists with upstream's now always enabled DEBUG_RODATA feature. if you still have problems with it, let me know.
Comment 8 Alexander Tsoy 2016-07-19 13:41:34 UTC
This was fixed in 4.6.4-r1 (grsecurity-3.1-4.6.4-201607182211)