Hi again, i've wanted to run TOMOYO Linux with ccs_hardened-sources latest version from the overlay: 2.6.27-r1 with all PaX options compiled in. (Btw. it's very confusing to use ccs_hardened-sources r1 what in reality means Hardened-Source-2.6.27-r4. Maybe someone can change this to ccs_hardened-sources version 2.6.27-r4. Will new updates come for 2.6.28 ?) After that i have installed KVM-82 to start my virtual machines. But i have no chance to, dmesg shows me: brlan: port 1(eth0) entering learning state brlan: topology change detected, propagating brlan: port 1(eth0) entering forwarding state BUG: unable to handle kernel NULL pointer dereference at 0000000000000038 IP: [<ffffffffa0014aae>] 0xffffffffa0014aae PGD 0 Oops: 0000 [1] SMP CPU 0 Modules linked in: kvm_intel kvm Pid: 6204, comm: kvm Not tainted 2.6.27-ccs_hardened #5 RIP: 0010:[<ffffffffa0014aae>] [<ffffffffa0014aae>] 0xffffffffa0014aae RSP: 0018:ffff88012a447dd8 EFLAGS: 00010286 RAX: ffff88012a6f9850 RBX: ffff880128543c40 RCX: 00000000fffbd000 RDX: fffffffffffffffb RSI: 000000000000ae47 RDI: ffff8801291ff9c0 RBP: 00000000ffffffe7 R08: ffff880129aacfd0 R09: 00000000000000fe R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: 000000000000ae47 R14: 0000000000000006 R15: 000000d4b0e7e100 FS: 000074bcd3c9f6f0(0000) GS:ffffffff808cf600(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b CR2: 0000000000000038 CR3: 0000000128195000 CR4: 00000000000026e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Process kvm (pid: 6204, threadinfo ffff88012a446000, task ffff88012a6f9850) Stack: ffffe200040bbd48 ffffffff80263e27 0000000000000000 0000000000000000 0000000000000000 000000d4b0c04fc0 0000000000000000 00000000000001a2 000000d4b0c04000 ffffe200040bbd48 ffff8801291ff9c0 ffff880128d16c30 Call Trace: [<ffffffff80263e27>] ? 0xffffffff80263e27 [<ffffffff803495a1>] ? 0xffffffff803495a1 [<ffffffff8028902a>] ? 0xffffffff8028902a [<ffffffff802892bb>] ? 0xffffffff802892bb [<ffffffff8028931b>] ? 0xffffffff8028931b [<ffffffff8020250b>] ? 0xffffffff8020250b Code: 48 c7 c2 fb ff ff ff 41 55 41 54 55 53 48 81 ec d0 00 00 00 4c 8b a7 90 00 00 00 65 48 8b 04 25 00 00 00 00 48 8b 98 18 01 00 00 <49> 39 5c 24 38 0f 85 0c 07 00 00 81 fe 68 ae 10 40 0f 84 eb 01 RIP [<ffffffffa0014aae>] 0xffffffffa0014aae RSP <ffff88012a447dd8> CR2: 0000000000000038 ---[ end trace 98b56cd7b88ac042 ]--- BUG: unable to handle kernel paging request at 0000000000002c40 IP: [<ffffffffa00134b4>] 0xffffffffa00134b4 PGD 0 Oops: 0002 [2] SMP CPU 0 Modules linked in: kvm_intel kvm Pid: 6204, comm: kvm Tainted: G D 2.6.27-ccs_hardened #5 RIP: 0010:[<ffffffffa00134b4>] [<ffffffffa00134b4>] 0xffffffffa00134b4 RSP: 0018:ffff88012a447b98 EFLAGS: 00010282 RAX: ffffffffa00137e5 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff8801291ff9c0 RDI: 0000000000000000 RBP: ffff8801291ff9c0 R08: 0000000000000000 R09: ff1001ffff1001ff R10: ffff880028020700 R11: ffffffff803529b6 R12: ffff88012b405910 R13: ffff8801289b8080 R14: ffff88012ba3d780 R15: ffff880128543c40 FS: 000074bcd3c9f6f0(0000) GS:ffffffff808cf600(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b CR2: 0000000000002c40 CR3: 0000000000597000 CR4: 00000000000026e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Process kvm (pid: 6204, threadinfo ffff88012a446000, task ffff88012a6f9850) Stack: ffffffff803529b6 0000000000000008 ffff8801291ff9c0 ffffffffa00137f2 0000000000000000 ffffffff8027e1f8 ffff8801291ff9c0 ffff88012ba8c340 0000000000000000 ffff880127cbf340 0000000000000001 ffffffff8027cbba Call Trace: [<ffffffff803529b6>] ? 0xffffffff803529b6 [<ffffffffa00137f2>] ? 0xffffffffa00137f2 [<ffffffff8027e1f8>] ? 0xffffffff8027e1f8 [<ffffffff8027cbba>] ? 0xffffffff8027cbba [<ffffffff8022b302>] ? 0xffffffff8022b302 [<ffffffff8022bab7>] ? 0xffffffff8022bab7 [<ffffffff8020405a>] ? 0xffffffff8020405a [<ffffffff80218743>] ? 0xffffffff80218743 [<ffffffff80580b79>] ? 0xffffffff80580b79 [<ffffffffa0014aae>] ? 0xffffffffa0014aae [<ffffffff80263e27>] ? 0xffffffff80263e27 [<ffffffff803495a1>] ? 0xffffffff803495a1 [<ffffffff8028902a>] ? 0xffffffff8028902a [<ffffffff802892bb>] ? 0xffffffff802892bb [<ffffffff8028931b>] ? 0xffffffff8028931b [<ffffffff8020250b>] ? 0xffffffff8020250b Code: 53 48 89 fb 51 3b 2b 7d 17 48 63 c5 48 8b 7c c3 08 48 8b 47 18 48 85 c0 74 02 ff d0 ff c5 eb e5 5a 5b 5d c3 55 53 48 89 fb 41 53 <f0> ff 8f 40 2c 00 00 0f 94 c0 84 c0 0f 84 a8 00 00 00 48 8b 6f RIP [<ffffffffa00134b4>] 0xffffffffa00134b4 RSP <ffff88012a447b98> CR2: 0000000000002c40 ---[ end trace 98b56cd7b88ac042 ]--- Fixing recursive fault but reboot is needed! If i'm using the hardened-sources-2.6.28 with PaX support all is working fine. The ccs-sources-2.6.28-r1 works also fine, but i don't have there PaX and grsecurity options. Maybe someone can add an overlay for css_hardened-2.6.28-r1 and test it with PaX and KVM. Last question: Is it normal that i can see TOMOYO Linux only under "File Systems" and not "Security options" ? Thanks in advance.
TOMOYO
Fork