after rebuilding a running hardened system for a collegue i encountered this error numerous times while attempting to recompile/update the kernel with hardened-dev-sources. I have re-bootstrapped the entire machine, re-emerged headers and sources over four times each, make cleaned sources numerous times and still the same error manifests itself. This particular server is running hardened-dev-sources with grsecurity preset to medium security and pax flags have been set to the recommended defaults. This particular bug has not been reproduced on a separate system as none are available to me matching it's specifications. I have checked the headers and observed that both the files that "cannot be found" are however present. I suspect some inconsistancy in asm/irq.h or linux/irq.h may be resposible but cannot confirm this. Reproducible: Always Steps to Reproduce: 1. prepare hardened-dev-sources-r16,17,18 for compile with grsecurty and pax enabled against linux26-headers-1r 2. start kernel compile with make && make modules modules_install install 3. kernel compile will fail reporting linux/irq.h: No such file or directory Actual Results: kernel compile fails with the following errors LD drivers/media/dvb/ttpci/built-in.o LD drivers/media/dvb/ttusb-budget/built-in.o LD drivers/media/dvb/ttusb-dec/built-in.o LD drivers/media/dvb/built-in.o LD drivers/media/radio/built-in.o LD drivers/media/video/built-in.o LD drivers/media/built-in.o LD drivers/message/fusion/built-in.o CC [M] drivers/message/fusion/mptbase.o CC [M] drivers/message/fusion/mptscsih.o CC [M] drivers/message/fusion/isense.o CC [M] drivers/message/fusion/mptctl.o CC drivers/message/i2o/i2o_core.o CC drivers/message/i2o/i2o_proc.o LD drivers/message/i2o/built-in.o CC [M] drivers/message/i2o/i2o_config.o CC [M] drivers/message/i2o/i2o_block.o CC [M] drivers/message/i2o/i2o_scsi.o LD drivers/message/built-in.o LD drivers/misc/built-in.o CC drivers/net/epic100.o CC drivers/net/mii.o CC drivers/net/Space.o CC drivers/net/net_init.o In file included from include/linux/interrupt.h:11, from include/linux/netdevice.h:515, from drivers/net/net_init.c:44: include/asm/hardirq.h:6:23: linux/irq.h: No such file or directory make[2]: *** [drivers/net/net_init.o] Error 1 make[1]: *** [drivers/net] Error 2 make: *** [drivers] Error 2 Expected Results: successful kernel compile twisted root # emerge info Portage 2.0.51-r3 (default-linux/x86/2004.2, gcc-3.3.4, glibc-2.3.4.20040808-r1, 2.6.7-hardened-r16 i686) ================================================================= System uname: 2.6.7-hardened-r16 i686 AMD Athlon(tm) Processor Gentoo Base System version 1.4.16 Autoconf: sys-devel/autoconf-2.59-r5 Automake: sys-devel/automake-1.8.5-r1 Binutils: sys-devel/binutils-2.15.90.0.1.1-r3 Headers: sys-kernel/linux26-headers-2.6.8.1-r1 Libtools: sys-devel/libtool-1.5.2-r7 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CFLAGS="-march=athlon-tbird -O2 -fomit-frame-pointer -fstack-protector -fstack-protector-all -pipe" CHOST="i686-pc-linux-gnu" COMPILER="" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/share/config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-march=athlon-tbird -O2 -fomit-frame-pointer -fstack-protector -fstack-protector-all -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="autoaddcvs autoconfig buildpkg ccache distlocks sandbox sfperms" GENTOO_MIRRORS="http://gentoo.osuosl.org http://distro.ibiblio.org/pub/Linux/distributions/gentoo" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="x86 X509 acl acpi activefilter adns aliaschain amd apache2 authdaemond berkdb bzlib cap chroot cluster crypt ctype dba dio directfb erandom extensions fam fortran freetds ftp gd hardened hardenedphp imap innodb ipv6 ipv6arpa java kerberos ldap maildir mbox memlimit mmap mmx mpi mysql nagios-dns nagios-ntp nagios-ping nagios-ssh neural nis nls nptl nptlonly objc odbc pcntl pcre pg-hier pg-intdatetime pg-vacuumdelay php pic pie posix sasl semanticfix sendfile session sftplogging shaper shared sharedmem slang snortsam sockets softquota ssl sysvipc szip vda vhosts xml"
The kernel includes from its include/ subdirectory; not /usr/include/linux...
twisted linux # ls include/linux/irq irq.h irq_cpustat.h Not sure whats going on here but the file is in the sources...
Does this problem still exist in the hardened-dev-sources for 2.6.10?
I wasnt aware h.d.s-2.6.10 had been released. will test asap.
Compile tested across two servers to eliminate any possibility that one server is directly affected. First server has been in production around ten months, second is the server this bug was encountered on and has been in production for about four months. No bad errors, few warnings. Looks good Server #1 ========== if [ -r System.map ]; then /sbin/depmod -ae -F System.map 2.6.10-hardened-r1; fi Kernel: arch/i386/boot/bzImage is ready sh /usr/src/linux-2.6.10-hardened-r1/arch/i386/boot/install.sh 2.6.10-hardened-r1 arch/i386/boot/bzImage System.map "/boot" In order to use the new kernel image you have just installed, you will need to reboot the machine. First, however, you will need to either make a bootable floppy diskette, re-run LILO, or have GRUB installed. Checking for LILO...No GRUB is installed. To automatically switch to new kernels, point your default entry in menu.lst to cache01-iSMP linux # Server #2 ========== if [ -r System.map ]; then /sbin/depmod -ae -F System.map 2.6.10-hardened-r1; fi Kernel: arch/i386/boot/bzImage is ready sh /usr/src/linux-2.6.10-hardened-r1/arch/i386/boot/install.sh 2.6.10-hardened-r1 arch/i386/boot/bzImage System.map "/boot" In order to use the new kernel image you have just installed, you will need to reboot the machine. First, however, you will need to either make a bootable floppy diskette, re-run LILO, or have GRUB installed. Checking for LILO...No GRUB is installed. To automatically switch to new kernels, point your default entry in menu.lst to twisted linux #
