[tomoyo-users-en 59] Re: ccs_hardened-sources updates and kvm virtualization not working

Back to archive index
Vadim Korschok korsc****@carit*****
Tue Feb 3 23:21:20 JST 2009


Hello again,

sorry that I haven't tested it on the Dell PowerEgde Server first, because it's working.

> Maybe you can also describe what patch you've downloaded and how you patched.

># emerge =sys-kernel/hardened-sources-2.6.27-r7
># cd /usr/src/linux
># tar -zxf ~/ccs-patch-1.6.6-20090202.tar.gz
># patch -p1 < patches/ccs-patch-2.6.27-grsecurity-2.1.12-2.6.27.10.diff
># cp ~/config-2.6.27-patched-h7 .config
># emacs Makefile
>
>  EXTRAVERSION = -hardened-r7
>  EXTRAVERSION = -ccs-hardened-r7
>

Thanks for this infos.


> By the way, your report had lines
> PAX: kvm:6209, uid/euid: 0/0, attempted to modify kernel code
> BUG: unable to handle kernel paging request at ffffffff8059b040
> IP: [<ffffffffa00394d3>] intel_iommu_found+0x4d3/0x4075 [kvm_intel]

> and I received a patch which disables intel_iommu by default.

I can't apply this patch to 2.6.27-r7 hardened. But that is not importent at the moment.

I hope you haven't wasted so much time on me, thanks for this good support.

Regards.




More information about the tomoyo-users-en mailing list
Back to archive index