| View previous topic :: View next topic |
| Author |
Message |
geloo
n00b
Joined: 29 Mar 2008
Posts: 33
|
 Posted: Tue Sep 04, 2012 1:45 pm Post subject: Hardened kernel + nvidia : Unknown symbol latent_entropy |
 |
|
Hello,
i know that hardened and binary nvidia drivers are not safe, but anyway for some purpose i would really glad to somehow use it.
Before today i have used nouveau driver with working correctly, but after installing xemacs and trying to move window i decide to install nvidia in order to better performance. At least for trying. If not, i could always going back to nouveau.
So, after installin nvidia-drivers-304.43 and in try to load nvidia.ko module system give me next error in kernel log.
| Code: | | kernel: nvidia: Unknown symbol latent_entropy (err 0) |
What does it mean and how can i fix it? if can 
thank you for any ideas and help
Best wishes,
emerge --info
| Code: |
Portage 2.1.11.9 (hardened/linux/amd64, gcc-4.6.3, glibc-2.15-r2, 3.4.6-hardened-r1-winterfall x86_64)
=================================================================
System uname: Linux-3.4.6-hardened-r1-winterfall-x86_64-Intel-R-_Core-TM-2_Duo_CPU_T7700_@_2.40GHz-with-gentoo-2.1
Timestamp of tree: Tue, 04 Sep 2012 00:45:01 +0000
ccache version 3.1.7 [enabled]
app-shells/bash: 4.2_p37
dev-java/java-config: 2.1.12
dev-lang/python: 2.7.3-r2, 3.1.5, 3.2.3-r1
dev-util/ccache: 3.1.7
dev-util/cmake: 2.8.8-r3
dev-util/pkgconfig: 0.27
sys-apps/baselayout: 2.1-r1
sys-apps/openrc: 0.10.5
sys-apps/sandbox: 2.6
sys-devel/autoconf: 2.13, 2.69
sys-devel/automake: 1.11.6, 1.12.2
sys-devel/binutils: 2.22.90
sys-devel/gcc: 4.5.3-r2, 4.6.3
sys-devel/gcc-config: 1.7.3
sys-devel/libtool: 2.4.2
sys-devel/make: 3.82-r3
sys-kernel/linux-headers: 3.5 (virtual/os-headers)
sys-libs/glibc: 2.15-r2
Repositories: gentoo
ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="* -@EULA AdobeFlash-10.3"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -march=core2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/openvpn/easy-rsa"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-O2 -pipe -march=core2 -pipe"
DISTDIR="/zen/portage/distfiles"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs ccache config-protect-if-modified distlocks ebuild-locks fixlafiles news parallel-fetch parse-eapi-ebuild-head protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LINGUAS="en ru cs"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/zen/tmp"
PORTDIR="/zen/portage"
PORTDIR_OVERLAY=""
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X aac acl acpi alsa amd64 bash-completion berkdb bzip2 cairo cli consolekit cracklib crypt cups cxx dbus djvu dri dvd ffmpeg flac gdbm gif gpm gtk hardened iconv ipv6 jpeg jpeg2k justify kerberos lame ldap lzma mmx mng modules mp3 mp4 mpeg mudflap multilib mysql ncurses nls nptl objc objc++ odbc ogg opengl openmp pam pax_kernel pcre perl png pppd python qt3support qt4 readline session sse sse2 ssh ssl svg tcpd theora tiff truetype udev unicode urandom usb vim-syntax vmware vorbis xorg xv zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="evdev synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en ru cs" PHP_TARGETS="php5-3" PYTHON_TARGETS="python3_2 python2_7" RUBY_TARGETS="ruby18 ruby19" USERLAND="GNU" VIDEO_CARDS="vesa nouveau intel" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, MAKEOPTS, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON
|
|
|
| Back to top |
|
 |
geloo
n00b
Joined: 29 Mar 2008
Posts: 33
|
| Posted: Tue Sep 04, 2012 3:27 pm Post subject: |
|
|
UPDATE:
okey, all i found is that latent_entropy is a plugin for gcc. More describing there http://grsecurity.net/pipermail/grsecurity/2012-July/001093.html
my gcc version is 4.6.3 witch was used for compiling the kernel 3.4.6-hardened. In case i change gcc to 4.5.3 and trying to compile nvidia-drivers, i recives an error and interrupt with compiling.
| Code: | | gcc: error: Fail to initialize plugin /usr/src/linux-3.4.6-hardened-r1/tools/gcc/latent_entropy_plugin.so |
After reading the description of latent_entropy i still fully not uderstand what is it. not sure if its possible to switch it off or not. So, going to compile kernel with previous gcc version - 4.5.3.
Maybe something change. Dont know. |
|
| Back to top |
|
|
geloo
n00b
Joined: 29 Mar 2008
Posts: 33
|
| Posted: Tue Sep 04, 2012 3:30 pm Post subject: |
|
|
UPDATE 0.1
actualy, its part of GRSECURIITY. So, it need to somewhere somehow switch it off in kernel config under the GRSECURITY oprtion.
Oh, i found next option inside .config -
| Code: | | CONFIG_PAX_LATENT_ENTROPY=y |
So now, i first only need to found where this option is within make menuconfig interface. This will be worst problem that i suppose) |
|
| Back to top |
|
|
geloo
n00b
Joined: 29 Mar 2008
Posts: 33
|
| Posted: Tue Sep 04, 2012 3:34 pm Post subject: |
|
|
| option found, switched of and recompile kernel |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Unsupported Software
