CONFIG_SECURITY_ROOTPLUG [was: Re: 2.6.27-rc7 no init found on the root partition?]

CONFIG_SECURITY_ROOTPLUG [was: Re: 2.6.27-rc7 no init found on the root partition?]

[Lukas Hejtmanek]

Hello,

I finally found my problems with no init found.

It was caused by the CONFIG_SECURITY_ROOTPLUG option.

I wonder why this option in 2.6.26.3 kernel allows the kernel boot up, while
with 2.6.27-rc7, the kernel is unable to run even init.

-- 
Lukáš Hejtmánek

Re: CONFIG_SECURITY_ROOTPLUG [was: Re: 2.6.27-rc7 no init found on the root partition?]

[Serge E. Hallyn]

Quoting Lukas Hejtmanek (xhejtman@ics.muni.cz):
> Hello,
> 
> I finally found my problems with no init found.
> 
> It was caused by the CONFIG_SECURITY_ROOTPLUG option.
> 
> I wonder why this option in 2.6.26.3 kernel allows the kernel boot up, while
> with 2.6.27-rc7, the kernel is unable to run even init.

Hmm, is there a difference in the device drivers such that root_plug simply
isn't able to find the usb 'key' in 2.6.27-rc7?

When you boot with CONFIG_SECURITY_ROOTPLUG=n, can you read the usb key?

-serge

Re: CONFIG_SECURITY_ROOTPLUG [was: Re: 2.6.27-rc7 no init found on the root partition?]

[Lukas Hejtmanek]

On Thu, Sep 25, 2008 at 09:49:27PM -0500, Serge E. Hallyn wrote:
> Hmm, is there a difference in the device drivers such that root_plug simply
> isn't able to find the usb 'key' in 2.6.27-rc7?
> 
> When you boot with CONFIG_SECURITY_ROOTPLUG=n, can you read the usb key?

I do not have USB key at all. So maybe there is a security bug in 2.6.26.3?

-- 
Lukáš Hejtmánek

Re: CONFIG_SECURITY_ROOTPLUG [was: Re: 2.6.27-rc7 no init found on the root partition?]

[Valdis.Kletnieks]

[-- Attachment #1: Type: text/plain, Size: 549 bytes --]

On Fri, 26 Sep 2008 12:05:07 +0200, Lukas Hejtmanek said:
> On Thu, Sep 25, 2008 at 09:49:27PM -0500, Serge E. Hallyn wrote:
> > Hmm, is there a difference in the device drivers such that root_plug simply
> > isn't able to find the usb 'key' in 2.6.27-rc7?
> > 
> > When you boot with CONFIG_SECURITY_ROOTPLUG=n, can you read the usb key?
> 
> I do not have USB key at all. So maybe there is a security bug in 2.6.26.3?

It must be a bug in 26.3 - if you don't have the proper USB dongle/key/whatever
inserted, it shouldn't have come up.

[-- Attachment #2: Type: application/pgp-signature, Size: 226 bytes --]

Re: CONFIG_SECURITY_ROOTPLUG [was: Re: 2.6.27-rc7 no init found on the root partition?]

[Greg KH]

On Thu, Sep 25, 2008 at 06:54:00PM +0200, Lukas Hejtmanek wrote:
> Hello,
> 
> I finally found my problems with no init found.
> 
> It was caused by the CONFIG_SECURITY_ROOTPLUG option.
> 
> I wonder why this option in 2.6.26.3 kernel allows the kernel boot up, while
> with 2.6.27-rc7, the kernel is unable to run even init.

If you enable that option, you have to have the specific USB device
plugged into your system in order for any process to run as root (like
init).

So, odds are you don't have this specific device, so either specify a
different device id, or don't build it into your kernel :)

thanks,

greg k-h