Gentoo hardened kernel, v4.4.8-r1, emerge --ask sys-kernel/genkernel fails

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Gentoo hardened kernel, v4.4.8-r1, emerge --ask sys-kernel/genkernel fails

Postby west.suhanic » Thu Aug 04, 2016 2:47 pm

Hello All:

I have the following environment:

x86_64, linux-4.4.8-hardened-r1

The following command fails:

emerge --ask sys-kernel/genkernel

The error message found in /var/tmp/portage/dev-libs/boost-1.56.0-r1/temp/build.log reads as follows:


gcc.compile.c++
bin.v2/libs/log/build/gcc-4.9/gentoorelease/boost.locale.icu-off/log-api-unix/
pch-off/threading-multi/text_file_backend.o

"x86_64-pc-linux-gnu-g++"
-ftemplate-depth-128 -O2 -pipe -std=gnu++98
-finline-functions
-Wno-inline -Wall -pthread -fPIC
-fno-strict-aliasing
-ftemplate-depth-1024
-DBOOST_ALL_NO_LIB=1 -DBOOST_CHRONO_DYN_LINK=1 -DBOOST_DATE_TIME_DYN_LINK=1
-DBOOST_FILESYSTEM_DYN_LINK=1 -DBOOST_LOG_BUILDING_THE_LIB=1 -DBOOST_LOG_DLL
-DBOOST_LOG_USE_AVX2 -DBOOST_LOG_USE_NATIVE_SYSLOG
-DBOOST_LOG_USE_SSSE3 -DBOOST_LOG_WITHOUT_EVENT_LOG
-DBOOST_SPIRIT_USE_PHOENIX_V3=1 -DBOOST_SYSTEM_DYN_LINK=1
-DBOOST_SYSTEM_NO_DEPRECATED -DBOOST_THREAD_BUILD_DLL=1
-DBOOST_THREAD_DONT_USE_CHRONO=1 -DBOOST_THREAD_POSIX
-DBOOST_THREAD_USE_DLL=1 -DDATE_TIME_INLINE -DNDEBUG -D_GNU_SOURCE=1
-D_XOPEN_SOURCE=600

-I"." -c -o "bin.v2/libs/log/build/gcc-4.9/gentoorelease/
boost.locale.icu-off/log-api-unix/pch-off/threading-multi/text_file_backend.o"
"libs/log/src/text_file_backend.cpp"
In file included from ./boost/spirit/home/support/make_component.hpp:17:0,
from ./boost/spirit/home/support/meta_compiler.hpp:20,
from ./boost/spirit/home/qi/meta_compiler.hpp:14,
from ./boost/spirit/home/qi/detail/parse.hpp:14,
from ./boost/spirit/home/qi/parse.hpp:17,
from ./boost/spirit/home/qi/detail/construct.hpp:16,
from ./boost/spirit/home/qi/detail/assign_to.hpp:16,
from ./boost/spirit/home/qi/numeric/numeric_utils.hpp:16,
from libs/log/src/text_file_backend.cpp:50:
./boost/spirit/home/support/detail/make_cons.hpp:59:5: internal compiler error: Segmentation fault
}

Please note that I successfully built v4.4.8-r1 on an X86 machine the previous week.

Any suggestions?

Thank you,

west suhanic
west.suhanic
 
Posts: 6
Joined: Tue Feb 23, 2016 10:46 am

Re: Gentoo hardened kernel, v4.4.8-r1, emerge --ask sys-kernel/genkernel fails

Postby west.suhanic » Fri Aug 05, 2016 4:36 pm

Hello All:

I did a re-install. I got past the emerge of the genkernel. However while compiling the kernel another failure occured. The error
message follows:

HOSTLD Documentation/vDSO/vdso_standalone_test_x86
Documentation/vDSO/parse_vdso.o: In function `elf_hash':
parse_vdso.c:(.text+0xa4): undefined reference to `__stack_chk_fail'
Documentation/vDSO/parse_vdso.o: In function `vdso_init_from_sysinfo_ehdr':
parse_vdso.c:(.text+0x445): undefined reference to `__stack_chk_fail'
Documentation/vDSO/parse_vdso.o: In function `vdso_match_version':
parse_vdso.c:(.text+0x545): undefined reference to `__stack_chk_fail'
Documentation/vDSO/parse_vdso.o: In function `vdso_sym':
parse_vdso.c:(.text+0x6fa): undefined reference to `__stack_chk_fail'
Documentation/vDSO/parse_vdso.o: In function `vdso_init_from_auxv':
parse_vdso.c:(.text+0x7b5): undefined reference to `__stack_chk_fail'
collect2: error: ld returned 1 exit status
scripts/Makefile.host:134: recipe for target 'Documentation/vDSO/vdso_standalone_test_x86' failed
make[2]: *** [Documentation/vDSO/vdso_standalone_test_x86] Error 1
scripts/Makefile.build:403: recipe for target 'Documentation/vDSO' failed
make[1]: *** [Documentation/vDSO] Error 2
make[1]: *** Waiting for unfinished jobs....
HOSTCC Documentation/watchdog/src/watchdog-simple
HOSTCC Documentation/watchdog/src/watchdog-test
Makefile:922: recipe for target 'vmlinux' failed


All help is appreciatewd

thank you,

west suhanic
west.suhanic
 
Posts: 6
Joined: Tue Feb 23, 2016 10:46 am

Re: Gentoo hardened kernel, v4.4.8-r1, emerge --ask sys-kernel/genkernel fails

Postby PaX Team » Wed Aug 31, 2016 5:30 am

you should report these on the gentoo bugzilla as they all seem to be specific to their hardened gcc (e.g., the forced use of ssp which the kernel's vdso isn't prepared for).
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm


Return to grsecurity support

cron