Re: [uml-devel] host and uml kernel with grsec

[BlaisorBlade <blaisorblade_spam@yahoo.it>]

Alle 23:32, lunedì 28 giugno 2004, Tom Rottler ha scritto:
First: thanks a lot!

> Still TO DO:
> * I have a working grsec enabled uml kernel, based on the uml patch
>   of Thomas Fischbacher, which you can find at the same web site.
>   I am going to create a patch that leads to my grsec-uml kernel,
>   this will take another few days due to lack of free time.

> * Build a devanon patch for the host kernel. There is for example a
>   collision on a minor device number between grsec and devanon.
You can freely change the minor in mem.c for devanon patch, as long as you 
update it in the host filesystem device node; but devanon patch is a bit 
broken (somebody reported panics with it), so be careful with the patch.

> * Testing, testing, testing! I am not a kernel hacker, so probably
>   I introduced severe bugs with my patch. Be very careful with it!!!
Be careful to avoid dropping security checks! I remember that someone posted a 
patch (against Gentoo sources which include GrSec, to find it) having a such 
problem, IIRC.
-- 
Paolo Giarrusso, aka Blaisorblade
Linux registered user n. 292729



-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
User-mode-linux-devel mailing list
User-mode-linux-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/user-mode-linux-devel