[uml-devel] host and uml kernel with grsec

[Tom Rottler <tom@multip.hu>]

Hi!
My goal was to build an uml configuration where both the host and the
uml kernel are grsec enabled. I did not get this running due to an
unsolvable conflict (at least for me) between the host-skas3 and the
grsec patches.

A few days ago, I found this web site of Thomas Fischbacher:
http://www.cip.physik.uni-muenchen.de/~tf/linux/
He has a patch called "patch-2.4.26-tf.bz2" there, that hast *both*
patches applied, and some other stuff, too. Well, this works fine,
but I don't need the other patches, and I'd like to use the new 2.0
release of grsec.

So I tried to take out the skas-related changes of Thomas Fischbacher's
patch and merge them into the host-skas3 patch for kernel 2.4.25. The
result is a patch against vanilla 2.4.26 patches only with the
grsecurity-2.0-2.4.26.patch from the grsec website, which you'll find
attached to this mail.
The compiled kernel runs well as far as I can see by now, basic grsec
stuff does work, and I could also start my grsec-uml on it in skas
mode.

Still TO DO:
* I have a working grsec enabled uml kernel, based on the uml patch
  of Thomas Fischbacher, which you can find at the same web site.
  I am going to create a patch that leads to my grsec-uml kernel,
  this will take another few days due to lack of free time.

* Build a devanon patch for the host kernel. There is for example a
  collision on a minor device number between grsec and devanon.

* Testing, testing, testing! I am not a kernel hacker, so probably
  I introduced severe bugs with my patch. Be very careful with it!!!

Best regards: Tom


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
User-mode-linux-devel mailing list
User-mode-linux-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/user-mode-linux-devel