grsecurity and gentoo

jtshaw · n00b Joined: 07 Aug 2003 Posts: 39 Location: Atlanta, GA

I'm having a bit of an issue. I'm currently using gentoo-sources 2.4.28-r2.

The kernel works all fine and dandy so long as I don't use any of the grsecurity features. As soon as I do use them, I get an error at boot saying I don't have devfs or udev enabled. Anyone now a way around this?

msalerno · Posted: Mon Dec 13, 2004 7:15 pm Post subject:

Do you have devfs or udev enabled?

According to the Gentoo install handbook, you should have devfs installed for the 2.4 kernel, if you use udev, then you would need to configure that.

jtshaw · n00b Joined: 07 Aug 2003 Posts: 39 Location: Atlanta, GA

Yes, I have devfs enabled and set to automatically boot on startup.

I built two kernels, the only difference between them is the first one I compiled without grsecurity, and the second one I compiled with grsecurity.

The first one boots just fine, the second one gets the complaints about devfs. Looking at the kernel output on the 2nd one I can even see the line stating it started devfs. When the system gives me the error message and I boot into single user mode, I can even see devices in /dev. The problem, it seams, is some of the devices are missing. I'm trying to figure out what grsecurity setting is causing this...

jtshaw · n00b Joined: 07 Aug 2003 Posts: 39 Location: Atlanta, GA

I got it to work... looks like whatever patch makes grsecurity and pax work ok with the devfs dependant startup scripts is only included in the hardened sources.

I'm not sure why they wouldn't include that in the regular gentoo-sources if they are also going to include the grsecurity patch....