:: Re: [DNG] unoffic-grsec 4.9.27 kern…
Startseite
Nachricht löschen
Nachricht beantworten
Autor: Miroslav Rovis
Datum:  
To: Mathias Krause
CC: dng
Betreff: Re: [DNG] unoffic-grsec 4.9.27 kernel compile, one last hurdle
On 170512-22:49+0200, Mathias Krause wrote:
> Hi Miroslav,
>
> On 12 May 2017 at 22:06, Miroslav Rovis <miro.rovis@???> wrote:
> > [...]
> > dpkg-gencontrol: error: illegal package name 'linux-headers-4.9.27-unofficial_grsec170512-14': character '_' not allowed
> > scripts/package/Makefile:91: recipe for target 'deb-pkg' failed
> > make[1]: *** [deb-pkg] Error 255
> > Makefile:1334: recipe for target 'deb-pkg' failed
> > make: *** [deb-pkg] Error 2
> >
> > [...] Also I think I saw (but wasn't able to find it) that
> > Mathias Krause made a notice about it in his github (but he hasn't yet
> > fixed it in that minipli repo of his, the link way in the top;
>
> well, this one *is* actually fixed in the git repo already, see [1].
> I haven't tagged that release, though. So maybe you just apply that
> patch locally? It's really just a 'sed s/_/+/ localversion-*'.

Yeah, I figured out. See below.

Yes, I hope so. It's churning on (slow machine). I hope so:
> After applying the diff, just re-do the 'make deb-pkg'. It should't
> rebuild everything, just a few files and the Debian packages.
>
> Thanks for testing!

Very glad that I'm getting useful... Been working hard for years...
>
> Regards,
> Mathias
>
> [1] https://github.com/minipli/linux-unofficial_grsec/commit/fc6850f573063e8b02a2b6d756abbe2c7ae8618f

Right:

$ git describe fc6850f573063
v4.9.27-unofficial_grsec-1-gfc6850f57306
$

which shows it:

$ diff ~/Downloads/unofficial_grsec-v4.9.27.diff ~/Downloads/unofficial_grsec-v4.9.27-unofficial_grsec-1-gfc6850f57306.diff
153902c153902
< index 000000000000..3c4df767c6cd
---
> index 000000000000..ca785b0383c4

153906c153906
< +-unofficial_grsec
---
> +-unofficial+grsec

$

And then:

$ git diff v4.9.27..v4.9.27-unofficial_grsec-1-gfc6850f57306 > \
    ~/Downloads/unofficial_grsec-v4.9.27-unofficial_grsec-1-gfc6850f57306.diff


And that is being built. And then, for my dear Devuaners, then (once it
hopefully all works) I make a tip on dev1galaxy.org. I have been wishing
to teach newbies grsec for years!

My thanks to you, Mathias!

Ah, for everybody who is interested in the KSPP[*] and grsecurity
long standing controversy, here's a must read:

It looks like there will be no more public versions of PaX and Grsec
http://openwall.com/lists/kernel-hardening/2017/05/11/2
(it's the reply by PaX Team :) and it's delicious, has shut some mouths
stiff closed, as I see it; repent, rippers in the shadows, if you can,
you --in your mind and in appearance, but you're small-- big guys... I
don't have it so much with the servants of yours... )
---
[*] Kernel Self Protection Project, basically, regarded by many as
some kind of a ripoff of grsecurity's code

Regards!
--
Miroslav Rovis
Zagreb, Croatia
https://www.CroatiaFidelis.hr