Re: [gentoo-amd64] hardened-sources

["Kevin N. Carpenter" <kevinc@seaplace.org>]

Hi all -

Got a funny one that has cost me a few hours of wondering, followed by 
enlightenment, followed by more wondering...  Not sure this is an AMD64 
issue or a kernel issue, but since I'm subscribed here, thought I'd 
start here.

I started my newly rebuilt system on gentoo-sources 2.6.13, but since 
this is a firewall machine, I opted to go with hardened-sources 2.6.11.  
Quickly found out that GRSecurity level "high" caused startup errors 
with INIT, but "medium" seemed to work fine.  However, for the life of 
me, I couldn't get DHCPD to respond to request for IP addressed.  No 
dmesg complaint, nothing in the log files, no network activity... the 
last was the key.  I'm using the builtin Marvel gigabit on my Asus 
motherboard.  Eventually I realized I couldn't do anything out that 
port, although ifconfig showed it up.  A bit more looking showed the 
lack of a link-light.  Tried swapping cables, ports, etc. - no go.  
Eventually booted back to 2.6.13 (non-hardened source tree) and the port 
works fine!  I noticed the LiveCD is 2.6.12, and the port works there as 
well (which kept me from going completely insane and replacing the 
motherboard.  Once it worked on LiveCD I realized I had a kernel problem.)

So... does anyone know if this is a 2.6.11 issue, and AMD-64 issue, or a 
general hardened-sources issues?

Thanks!

Kevin (running unhardened 2.6.13 for now...)
-- 
gentoo-amd64@gentoo.org mailing list