From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1OHyVn-0007QQ-K0 for garchives@archives.gentoo.org; Fri, 28 May 2010 12:18:03 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 6BFE1E0824; Fri, 28 May 2010 12:16:18 +0000 (UTC) Received: from tommyserver.de (unknown [85.14.198.50]) by pigeon.gentoo.org (Postfix) with ESMTP id 1F487E0824 for ; Fri, 28 May 2010 12:16:18 +0000 (UTC) Received: from [192.168.178.22] (p4FDF28D6.dip0.t-ipconnect.de [79.223.40.214]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by tommyserver.de (Postfix) with ESMTPSA id 83F28C49A74; Fri, 28 May 2010 14:16:15 +0200 (CEST) Message-ID: <4BFFB418.801@gentoo.org> Date: Fri, 28 May 2010 14:16:24 +0200 From: Thomas Sachau Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 To: gentoo-hardened@lists.gentoo.org CC: sfjro@users.sourceforge.net Subject: [gentoo-hardened] Re: aufs2 Monday GIT release References: <26440.1274664907@jrobl> <4BFA856B.5090203@gmx.de> <11262.1274761932@jrobl> In-Reply-To: <11262.1274761932@jrobl> X-Enigmail-Version: 1.0.1 OpenPGP: id=211CA2D4 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="------------enigE5EE1A9B5962F0B237D4DC3A" X-Archives-Salt: 4bfe7425-aeff-4783-b94e-84e8d44c8b67 X-Archives-Hash: 35e49934a50ac4b1aea96ac9cb5a6a71 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigE5EE1A9B5962F0B237D4DC3A Content-Type: multipart/mixed; boundary="------------060306050407030808000602" This is a multi-part message in MIME format. --------------060306050407030808000602 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Since this is a conflict between aufs2 and pax/grsec patches, i would lik= e to see the view of the pax team too. Below are the two mails from aufs2 upstream together with t= he latest patch, which does workaround the problem and contains some additional comments. Since he is not subscribed, please keep him in CC. Am 25.05.2010 06:32, schrieb sfjro@users.sourceforge.net: >=20 > "Tommy[D]": >> just tried to compile aufs2-standalone against my local kernel sources= , b=3D >> ut get the attached failure >> for 2.6.33. The kernel is a development kernel from Gentoo with additi= ona=3D >> l pax and grsec patches. >=20 > I found the pax and grsec patches declare members as 'const'. > grsecurity-2.1.14-2.6.33.4-201005151340.patch > pax-linux-2.6.33.4-test19.patch >=20 > For instance, >=20 > struct address_space_operations { > - int (*writepage)(struct page *page, struct writeback_control *wbc); > - int (*readpage)(struct file *, struct page *); > - void (*sync_page)(struct page *); > + int (* const writepage)(struct page *page, struct writeback_control *= wbc); > + int (* const readpage)(struct file *, struct page *); > + void (* const sync_page)(struct page *); >=20 > It means setting writepage (and other members) is prohibited. But aufs > sets them dynamically. I think this is the cause of your problem. > I don't know whether making them 'const' is necessary or not. >=20 >=20 > J. R. Okajima >=20 > -----------------------------------------------------------------------= ------- >=20 >=20 and >> If you really need to co-work aufs and grsec/pax, then this patch will= >> > solve the problem. But I don't think it a good approach. > It was broken. Here is an updated one. >=20 > J. R. Okajima >=20 --=20 Thomas Sachau Gentoo Linux Developer --------------060306050407030808000602 Content-Type: application/x-bzip2; name="a.patch.bz2" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="a.patch.bz2" QlpoOTFBWSZTWXgoJWkABIxfgFwwe//////33oS////6YAh8SmC0vt13LYtq3YOgAFDohKIE CGTUxpo0NJhT1NGjI02o0AGjQGmg0DUwTIgRMp5T1Gg0MaE0ZAA0AGTRgmmg4yZNGgNGmIyN DEMCaNMQYjQYQAGCRFGplTemRRtNQ009T1AA9TRk0ADTI0HqAAOMmTRoDRpiMjQxDAmjTEGI 0GEABgkSE0ATSZGjU9AmRko0yeo0ZG1A9R6QGT0mnqKCVbEA0MAYNMQjJ/dIMeXhj/YqEo2i Psazjs4/vr14WjGPB3MhyYRjGy9VIlpTkkLhoxxBRqjVcEkq1pjDEDGxS2661EqFbx/AjUHK MJurA0OFFX6cvM12xDgUKFXa5HitORdjnvcDV++mrt61uz2kawpWbN+qMNWRhStWPEstSgwY oisjhilmmsmhWT364N/cs51cJAEJJiQAwAMylCtw3NauQn1mqqC4xQWpd48liWZvZLmG6uXB iueZMf4f2xS3+s1z7E6hbDDHJvubq1pYDCTEzMfzKDQUXJnZdvEXPk8Wa++PwIZjBmRDtg5Y pXjazNa7hxF89ZJ5TehjCgtA7Gsd1SpkkSjcvwx2SCFIZ909uloxXoiRgM7BsrJgfPCATMhW wBMlPbjaxcNRIqcwT3Go+itRxOYEIDKakhpdRZYwYaNdru/QgUKVYzi6eVnsuk+hyKJBRpdh XtWWso8BGKjqtC6l0iB4IowR4LVePMZrHWPQ0c7MRnuUwiCam5enYYRmF0b2mkPSENLROhXR 6qSJXoQmPTtkhzFBgbeEKyCFSNcMdNyhVNRZVqzjxOrBci7yk6xWsJ32XBwcBJdK7zs8sITe MvgjN+PKCcggqIWKq4CIGjnLPWfLnZRI/gop5IaHFUqkSGUiVWvKmRazmoum6Pbu8UcfQ2Rb KHqgcQQGcLwUGl4+Ww0+aCb367e+PuP8ltvqr+vy7zUMBqKHU2myJBMjZd5htCqMGIxdiLia Bx7hZk12c+4OG3O7nhmGs6eJtalNsR6PIgLvQRXUec/uR+mNl7K5bxj7pPihNNjKEi1LBqyF TTDRSt2OaE9OO9I18T4nuotn26LJZIs1NunRpVHIoGXRfvVd6+uV6dTgik6rdAGAxhxMBqAw OoCz8At1UXIfz0uCTRSpT6yapJ4mRXn9CdKjVB3/EIoB8SC+ZgL7hy+dUVwe4qKwsKZgwoL7 ygSLdwDygSUMit6JUQNviF9D0BUcmbkZMwQTCbGKxnVHq5ZCsR3YfkJ4gnAS+G4sQ7fWIeJ2 sQYh/MaJjKWsG+kHgWylYVLqKlNBHmbAPb6sfrSPafiMzmivc+rTUqY/Ye8heBrdlW7bMkdE t81ujViW8+GzaMEyZUnkVlzI4QHIqpByxWnM9AYEiSCdIVMCWVP2AoYujOQOjzjEvCeq+GXS q5FIEmUhG8/J0kx2EIzDTbaTSoEAwTJrYRLnb18Ox1gt6xLyoUL/4rEqpfp4yt94RTBJpH4Q opMtZBDgLzC4WnFllwxqGVOa1Mqr2fNIr2lbhTyv+9FCGbxEFeZgRuPhtIqja/sYtWiR8TAN ijlSSJqEEHDNoWZFF2ncbWhQhXvg/hYbMcEjcMjMbrs7o9XMiV1JXosxptUka09zM06ggBJx 43kDDX8q9elVVguyVpeMTziklMx0ivM5+ciqojK7dVWasSmFnRXeG1gtDezZLt+ipIrpB/4W PNZmaakPMiM4YiQbOizCo50Nx0YndhFCWMvauoRcbWIdsWIzLkNYXsMIUMCMuH1d/XerS1gQ cUZeNgiZ3jO0PJBdevH1wuySICqgYsDZk1dhOoY2qOtTP3cqMC7GHAy40Ci5uZAJ/nV37IR6 m2gxFSFJq+xEBJ7T8SPU507yXZSF1hKZclcR40Du8g1gR4YB4YBUl8h1f5vTRFceN1pm6wbE bxmDA8vaI2JZXF7TYxuceeOUgYdT9L7XkLRd5XlyY/cUO5lPqPAjgrQDlK7LO8HRuCwJXxXp 6eujNKeMwytGv0PD0QqUQ7iBULQ3SFNXCJ3tvx4ZA1ZePUNKjaMaWBgeNs2qeyKM/D6eqR1P xyrIMo46GCaUNAzHJUY5yhpcqm/aJeoLMKOpc3OC4dwTErBl6IqJVVjdPQpLp6GLv5ojLOAp S8tOuhZhA6GyxcEFDNHNmLzxtXgl2nhImsDJLAazMZyAYvAN1O6DtEwTkDIae4gFiI7L/l65 3y4GOpTHW4t0cHpzIfBsbADpzKiONgfMtoS9dodjEWceRjbtpVoqIrFCAkzocFIgZ1gNR6g3 ku0YjkkULWyVrYoxvwY9UueJkyLFfUyKxd0g7He9AzHlJF6/OAwiWAiny2dUry9UcTVBUOIs kbBkO/RM0dAgpOwyQxoK9iA1XVgVIg2ALJJd81p5NFm4h9r4uL6yESPpg+22zngIy1RzobDT 4XGCaNj52pOt5tKSafeLCkvY5qip5UpOe4sjZwiLK2BrQmpIvaJRMtExEwkFwO2ZRvtyBTHo 0i62+4QW0A9wDMBB8KWsbCIjYxSuOFuziw7SG4QlEt0zpQIOQJj/YLA2CDDMuKXh9A5M2pKo jz4+/K5yI1s4iOfMcFNd5ssCbzaUBHsl59quuW5MFBIQ1oMl7JeJNl8EPjzQrFOz9gr19o0l wBonfbzC0BbWwfy26ld/xdyRThQkHgoJWkA= --------------060306050407030808000602-- --------------enigE5EE1A9B5962F0B237D4DC3A Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.15 (GNU/Linux) iJwEAQEKAAYFAkv/tB0ACgkQG7kqcTWJkGd72wQAlcNt7kUb6QGnJjunOCZnvLSc 1CUgzy0oHOWECTD+pm/UnfeDn9KFP+Zd78Dcf/80HkJvHwng61G+AIPCjHdvKjqZ K7HiAbqptMHPkVK2dlNV3Y88WDyWHgvdTSoxjJLs9G6rRa/bUAikquu/peE+3KiB lhYD3QWPhzxNF+cwLrc= =b1/c -----END PGP SIGNATURE----- --------------enigE5EE1A9B5962F0B237D4DC3A--