From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.54) id 1F4iGH-0006Ph-BH for garchives@archives.gentoo.org; Thu, 02 Feb 2006 17:28:49 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.5/8.13.5) with SMTP id k12HQYYP000774; Thu, 2 Feb 2006 17:26:34 GMT Received: from mail-relay-1.tiscali.it (mail-relay-1.tiscali.it [213.205.33.41]) by robin.gentoo.org (8.13.5/8.13.5) with ESMTP id k12HQYxs009071 for ; Thu, 2 Feb 2006 17:26:34 GMT Received: from c1358217.kevquinn.com (84.222.85.23) by mail-relay-1.tiscali.it (7.2.069.1) id 43C7D795002AFE83 for gentoo-hardened@lists.gentoo.org; Thu, 2 Feb 2006 18:26:33 +0100 Date: Thu, 2 Feb 2006 18:34:02 +0100 From: "Kevin F. Quinn (Gentoo)" To: gentoo-hardened@lists.gentoo.org Subject: Re: [gentoo-hardened] Problems compiling xen - please help... Message-ID: <20060202183402.5be7ea34@c1358217.kevquinn.com> In-Reply-To: <43E21F59.9070709@wildgooses.com> References: <43E21F59.9070709@wildgooses.com> X-Mailer: Sylpheed-Claws 2.0.0-rc4 (GTK+ 2.8.11; i686-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org Mime-Version: 1.0 Content-Type: multipart/signed; boundary=Sig_nYBZtvVP3SdI90yWtmwPTrC; protocol="application/pgp-signature"; micalg=PGP-SHA1 X-Archives-Salt: 91d9e039-012d-4197-954c-083dcb138997 X-Archives-Hash: 9c532c514016b4b5fc5c8dc24096c59c --Sig_nYBZtvVP3SdI90yWtmwPTrC Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Thu, 02 Feb 2006 15:03:53 +0000 Ed W wrote: > I am trying to get Xen running under a hardened kernel. The machine > is currently booted with "selinux=3D1 enforcing=3D0". I am having > trouble compiling: File a bug. These unresolved symbols indicate those files have been compiled with the stack protector on, as can be seen from the compilation lines. However while the ebuild does do the 'filter-flags -fPIE -fstack-protector' the build is ignoring CFLAGS for some of its compilations. An alternative for now, is to switch to the -hardenednopiessp variant of your compiler and build it with that. > gcc -DDEBUG -D_ACPI_ -DTEXTADDR=3D0x000D0000 -I. -I../../../tools/libxc=20 > -Wall -fno-builtin -O2 -msoft-float -m32 -march=3Di686 -D__ASSEMBLY__=20 > -DDEBUG -D_ACPI_ -DTEXTADDR=3D0x000D0000 -c trap.S > gcc -DDEBUG -D_ACPI_ -DTEXTADDR=3D0x000D0000 -I. -I../../../tools/libxc=20 > -Wall -fno-builtin -O2 -msoft-float -m32 -march=3Di686 -c vm86.c > gcc -DDEBUG -D_ACPI_ -DTEXTADDR=3D0x000D0000 -I. -I../../../tools/libxc=20 > -Wall -fno-builtin -O2 -msoft-float -m32 -march=3Di686 -c setup.c > gcc -DDEBUG -D_ACPI_ -DTEXTADDR=3D0x000D0000 -I. -I../../../tools/libxc=20 > -Wall -fno-builtin -O2 -msoft-float -m32 -march=3Di686 -c util.c > cpp -P -DDEBUG -D_ACPI_ -DTEXTADDR=3D0x000D0000 vmxassist.ld > > vmxassist.tmp ld -o vmxassist -m elf_i386 -nostdlib --fatal-warnings > -N -T vmxassist.tmp head.o trap.o vm86.o setup.o util.o > vm86.o: In function `address': > vm86.c:(.text+0x19): undefined reference to `__guard' > vm86.c:(.text+0x56): undefined reference to `__stack_smash_handler' > vm86.o: In function `trace': > vm86.c:(.text+0xe9): undefined reference to `__guard' > vm86.c:(.text+0x141): undefined reference to `__guard' > vm86.c:(.text+0x15d): undefined reference to `__stack_smash_handler' > vm86.o: In function `getreg': > vm86.c:(.text+0x278): undefined reference to `__guard' > vm86.o: In function `.L23': > ...etc... >=20 >=20 > I have tried various combinations of compiler using gcc-config. > Neither gcc-3.4.4 or gcc-3.3.6 seem to do any better, hardened or not >=20 > I suspect that this could be a problem with the compiler still using=20 > some hardend profile despite me asking for a non-hardened gcc? Can=20 > anyone please help debug this >=20 > Ed W --=20 Kevin F. Quinn --Sig_nYBZtvVP3SdI90yWtmwPTrC Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) iD8DBQFD4kKP9G2S8dekcG0RAirIAKCZgGYzLjEVvBQ3fsfIywiKIIcftACg4Bgg ejiC+zdvy+tHpigfz52LT/Q= =3p5n -----END PGP SIGNATURE----- --Sig_nYBZtvVP3SdI90yWtmwPTrC-- -- gentoo-hardened@gentoo.org mailing list