[gentoo-server] iSCSI Initiator in Gentoo Linux 2.6.11 hardened

[gentoo-server] iSCSI Initiator in Gentoo Linux 2.6.11 hardened

[Zemke, Kai]

[-- Attachment #1: Type: text/plain, Size: 2341 bytes --]

Hello everyone,

maybe my question is simple.
I never used Gentoo hardened sources before, but now I have a Postfix Server that is running on Gentoo hardened 2.6.11.

I need iSCSI initiator support for this server but when I do "make menuconfig" to build the requested modules ( like iSCSI Initiator over TCP/IP ) are not available.

So are these modules not available because of the hardened sources or because of the 2.6.11 kernel version?

Can I stay with the hardened sources and just have to upgrade to an newer version or is iSCSI not supported with hardened?

Mit freundlichem Gruß
Kai Zemke
-Technik-
==================================================
Email: kai.zemke@smartnet.de<mailto:kai.zemke@smartnet.de>
Telefon: +49 (40)   55 40-0        Zentrale
Telefon: +49 (40)   55 40-11 05 Durchwahl
Telefax: +49 (40)   55 40-10 40
==================================================
smartnet Online Service GmbH
Schnackenburgallee 177
22525 Hamburg
Ust.IdNr.:DE191136350
Handelsregister HRB 66463
Geschäftsführer: Dipl.-Ing. Axel Martens, Dipl.-Ing. Achim Martens
Steuernummer FA: Hamburg 45/759/00459
==================================================
Weitere Informationen siehe http://www.smartnet.de<http://www.smartnet.de/>
Hinweis: Diese Email kann vertrauliche und/oder rechtlich geschützte
Informationen enthalten. Wenn Sie nicht der beabsichtigte Empfänger
sind oder diese Email irrtümlich erhalten haben, informieren Sie bitte
sofort den Absender telefonisch oder per Email und löschen Sie diese
Email aus Ihrem System. Das unerlaubte Kopieren, sowie die
unbefugte Weitergabe dieser Email ist nicht gestattet. Wir haften nicht
für die Unversehrtheit von Emails, nachdem sie unseren Einfluss-
bereich verlassen haben.

**********************************************************************************************
IMPORTANT: The contents of this email and any attachments are confidential. They are intended for the 
named recipient(s) only.
If you have received this email in error, please notify the system manager or the sender immediately and do 
not disclose the contents to anyone or make copies thereof.
*** eSafe scanned this email for viruses, vandals, and malicious content. ***
**********************************************************************************************

[-- Attachment #2: Type: text/html, Size: 9796 bytes --]

Re: [gentoo-server] iSCSI Initiator in Gentoo Linux 2.6.11 hardened

[Pandu Poluan]

(Pls forgive my top-posting)

IIRC, the latest hardened *has* iSCSI initiator. It was first found in
the kernel 2.6.20.

Rgds,


On 2011-07-29, Zemke, Kai <Kai.Zemke@smartnet.de> wrote:
> Hello everyone,
>
> maybe my question is simple.
> I never used Gentoo hardened sources before, but now I have a Postfix Server
> that is running on Gentoo hardened 2.6.11.
>
> I need iSCSI initiator support for this server but when I do "make
> menuconfig" to build the requested modules ( like iSCSI Initiator over
> TCP/IP ) are not available.
>
> So are these modules not available because of the hardened sources or
> because of the 2.6.11 kernel version?
>
> Can I stay with the hardened sources and just have to upgrade to an newer
> version or is iSCSI not supported with hardened?
>
> Mit freundlichem Gruß
> Kai Zemke
> -Technik-
> ==================================================
> Email: kai.zemke@smartnet.de<mailto:kai.zemke@smartnet.de>
> Telefon: +49 (40)   55 40-0        Zentrale
> Telefon: +49 (40)   55 40-11 05 Durchwahl
> Telefax: +49 (40)   55 40-10 40
> ==================================================
> smartnet Online Service GmbH
> Schnackenburgallee 177
> 22525 Hamburg
> Ust.IdNr.:DE191136350
> Handelsregister HRB 66463
> Geschäftsführer: Dipl.-Ing. Axel Martens, Dipl.-Ing. Achim Martens
> Steuernummer FA: Hamburg 45/759/00459
> ==================================================
> Weitere Informationen siehe http://www.smartnet.de<http://www.smartnet.de/>
> Hinweis: Diese Email kann vertrauliche und/oder rechtlich geschützte
> Informationen enthalten. Wenn Sie nicht der beabsichtigte Empfänger
> sind oder diese Email irrtümlich erhalten haben, informieren Sie bitte
> sofort den Absender telefonisch oder per Email und löschen Sie diese
> Email aus Ihrem System. Das unerlaubte Kopieren, sowie die
> unbefugte Weitergabe dieser Email ist nicht gestattet. Wir haften nicht
> für die Unversehrtheit von Emails, nachdem sie unseren Einfluss-
> bereich verlassen haben.
>
> **********************************************************************************************
> IMPORTANT: The contents of this email and any attachments are confidential.
> They are intended for the
> named recipient(s) only.
> If you have received this email in error, please notify the system manager
> or the sender immediately and do
> not disclose the contents to anyone or make copies thereof.
> *** eSafe scanned this email for viruses, vandals, and malicious content.
> ***
> **********************************************************************************************


-- 
--
Pandu E Poluan - IT Optimizer
My website: http://pandu.poluan.info/

Re: [gentoo-server] iSCSI Initiator in Gentoo Linux 2.6.11 hardened

[Pandu Poluan]

> On 2011-07-29, Zemke, Kai <Kai.Zemke@smartnet.de> wrote:
>> Hello everyone,
>>
>> maybe my question is simple.
>> I never used Gentoo hardened sources before, but now I have a Postfix Server
>> that is running on Gentoo hardened 2.6.11.
>>
>> I need iSCSI initiator support for this server but when I do "make
>> menuconfig" to build the requested modules ( like iSCSI Initiator over
>> TCP/IP ) are not available.
>>
>> So are these modules not available because of the hardened sources or
>> because of the 2.6.11 kernel version?
>>
>> Can I stay with the hardened sources and just have to upgrade to an newer
>> version or is iSCSI not supported with hardened?
>>

On Fri, Jul 29, 2011 at 17:19, Pandu Poluan <pandu@poluan.info> wrote:
> (Pls forgive my top-posting)
>
> IIRC, the latest hardened *has* iSCSI initiator. It was first found in
> the kernel 2.6.20.
>

"Linux/i386 2.6.39-hardened-r8 Kernel Configuration"

Here's the result of a search for "iscsi" :

Symbol: ISCSI_TCP [=n]
Type  : tristate
Prompt: iSCSI Initiator over TCP/IP
  Defined at drivers/scsi/Kconfig:350
  Depends on: SCSI_LOWLEVEL [=n] && SCSI [=y] && INET [=y]
  Location:
    -> Device Drivers
      -> SCSI device support
        -> SCSI low-level drivers (SCSI_LOWLEVEL [=n])
  Selects: CRYPTO [=y] && CRYPTO_MD5 [=y] && CRYPTO_CRC32C [=n] &&
SCSI_ISCSI_ATTRS [=n]

Rgds,
-- 
Pandu E Poluan
~ IT Optimizer ~

 • Blog : http://pepoluan.tumblr.com
 • Linked-In : http://id.linkedin.com/in/pepoluan

AW: [gentoo-server] iSCSI Initiator in Gentoo Linux 2.6.11 hardened

[Zemke, Kai]

Hi,

thanks for all your input.

We will upgrade the kernel. The system should be moved from ESX virtualixation to XEN anyway. 
As soon as I have this postfix on my XEN Cluster I can offer the iscsi targets from within dom0 and everything is fine.

Thanks a lot. I was surprised seeing this hardened sources :-) 


Mit freundlichen Grüßen
Kai Zemke

===========================================================
Email: kai.zemke@smartnet.de
Telefon: +49(40)-5540-0 Telefax: +49(40)-5540-1040 Direkt: +49(40)-5540-1105
===========================================================

-----Ursprüngliche Nachricht-----
Von: Pandu Poluan [mailto:pandu@poluan.info] 
Gesendet: Freitag, 29. Juli 2011 14:59
An: gentoo-server@lists.gentoo.org
Betreff: Re: [gentoo-server] iSCSI Initiator in Gentoo Linux 2.6.11 hardened

> On 2011-07-29, Zemke, Kai <Kai.Zemke@smartnet.de> wrote:
>> Hello everyone,
>>
>> maybe my question is simple.
>> I never used Gentoo hardened sources before, but now I have a Postfix 
>> Server that is running on Gentoo hardened 2.6.11.
>>
>> I need iSCSI initiator support for this server but when I do "make 
>> menuconfig" to build the requested modules ( like iSCSI Initiator 
>> over TCP/IP ) are not available.
>>
>> So are these modules not available because of the hardened sources or 
>> because of the 2.6.11 kernel version?
>>
>> Can I stay with the hardened sources and just have to upgrade to an 
>> newer version or is iSCSI not supported with hardened?
>>

On Fri, Jul 29, 2011 at 17:19, Pandu Poluan <pandu@poluan.info> wrote:
> (Pls forgive my top-posting)
>
> IIRC, the latest hardened *has* iSCSI initiator. It was first found in 
> the kernel 2.6.20.
>

"Linux/i386 2.6.39-hardened-r8 Kernel Configuration"

Here's the result of a search for "iscsi" :

Symbol: ISCSI_TCP [=n]
Type  : tristate
Prompt: iSCSI Initiator over TCP/IP
  Defined at drivers/scsi/Kconfig:350
  Depends on: SCSI_LOWLEVEL [=n] && SCSI [=y] && INET [=y]
  Location:
    -> Device Drivers
      -> SCSI device support
        -> SCSI low-level drivers (SCSI_LOWLEVEL [=n])
  Selects: CRYPTO [=y] && CRYPTO_MD5 [=y] && CRYPTO_CRC32C [=n] && SCSI_ISCSI_ATTRS [=n]

Rgds,
--
Pandu E Poluan
~ IT Optimizer ~

 • Blog : http://pepoluan.tumblr.com
 • Linked-In : http://id.linkedin.com/in/pepoluan

**********************************************************************************************
IMPORTANT: The contents of this email and any attachments are confidential. They are intended for the 
named recipient(s) only.
If you have received this email in error, please notify the system manager or the sender immediately and do 
not disclose the contents to anyone or make copies thereof.
*** eSafe scanned this email for viruses, vandals, and malicious content. ***
**********************************************************************************************

Re: [gentoo-server] iSCSI Initiator in Gentoo Linux 2.6.11 hardened

[Sven Vermeulen]

[-- Attachment #1: Type: text/plain, Size: 1124 bytes --]

On Fri, Jul 29, 2011 at 11:42 AM, Zemke, Kai <Kai.Zemke@smartnet.de> wrote:

> Hello everyone,****
>
> ** **
>
> maybe my question is simple.****
>
> I never used Gentoo hardened sources before, but now I have a Postfix
> Server that is running on Gentoo hardened 2.6.11.****
>
> ** **
>
> I need iSCSI initiator support for this server but when I do “make
> menuconfig” to build the requested modules ( like iSCSI Initiator over
> TCP/IP ) are not available.****
>
> ** **
>
> So are these modules not available because of the hardened sources or
> because of the 2.6.11 kernel version?****
>
> ** **
>
> Can I stay with the hardened sources and just have to upgrade to an newer
> version or is iSCSI not supported with hardened?
>

Since this kernel is more than 6 years old and there have been quite a few
changes and updates, even in the area of iSCSI, is it a problem to try out a
more recent Linux kernel? It is also recommended due to security
vulnerabilities in older kernels.

If this isn't possible, does searching in the "make menuconfig" (using "/")
for ISCSI reveal any hits?

[-- Attachment #2: Type: text/html, Size: 1948 bytes --]