Re: minor porting notes for ipf 5.1.1 on openindiana
Darren Reed <[email protected]> Wed, 07 Mar 2012 08:20:14 +1100
| Newsgroups | gmane.comp.security.firewalls.ipfilter |
|---|---|
| Message-ID | <7097_1331069014_4F568055_7097_4205_1_4F567F8E.20700@reed.wattle.id.au> |
This is a multi-part message in MIME format.
--------------060707080101000402070606
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
On 7/03/2012 6:44 AM, Logan O'Sullivan Bruns wrote:
> Hi Darren,
>
> If it is helpful here are a few very minor changes I made to get ipf
> 5.1.1 working on my openindiana configuration.
>
> For the 64 bit kernel build on intel it seems to need -xmodel=kernel
> (using solarisstudio 12.3):
>
> --- ip_fil5.1.1/buildsunos 2011-11-15 04:39:16.000000000 -0800
> +++ ip_fil5.1.1-patched/buildsunos 2012-02-28 01:11:42.455690979 -0800
> @@ -98,7 +98,7 @@
> XARCH32_sparc="-Xa -xildoff -xarch=v8 -xmemalign=8s"
> if [ `cc -xarch=amd64 -xarch=v9 2>&1 | grep -c deprec` -eq 1 ] ; then
> XARCH64_sparc="-Xa -xildoff -m64 -xmemalign=8s"
> - XARCH64_i386="$XARCH32 -m64"
> + XARCH64_i386="$XARCH32 -m64 -xmodel=kernel"
> else
> XARCH64_sparc="-Xa -xildoff -xarch=v9 -xchip=ultra -xmemalign=8s -xcode=abs32"
> XARCH64_i386="$XARCH32 -xarch=amd64 -xcode=abs32"
I've never required that before to build for the kernel with
sun studio. I wonder what's changed...
3497984 sunstudio 12.3 build errors for kernel <https://sourceforge.net/tracker/?func=detail&aid=3497984&group_id=169098&atid=849053>
> To correctly select neti instead of pfil when building a zone and neti
> can't be directly checked:
In this set of changes, you had included explicit paths to
/usr/ccs/bin/ld. Was this actually required?
The script that starts the build on Solaris, buildsunos, should
result in /usr/ccs/bin being placed at the start of $PATH. Was
this not working for you?
I think what you mean is "when building inside a zone" rather than
"when building a zone", correct?
> And perhaps not the best complete fix since it still harmless tries
> modload but a change to make ipfboot work in a zone:
3497980 ipfboot fails in non-global zone <https://sourceforge.net/tracker/?func=detail&aid=3497980&group_id=169098&atid=849053>
Darren
--------------060707080101000402070606
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<tt>On 7/03/2012 6:44 AM, Logan O'Sullivan Bruns wrote:</tt>
<blockquote
cite="mid:7443_1331063799_4F566BF6_7443_3081_1_20120306194442.GA21887@kafka.gedanken.org"
type="cite">
<pre wrap=""><tt>Hi Darren,
If it is helpful here are a few very minor changes I made to get ipf
5.1.1 working on my openindiana configuration.
For the 64 bit kernel build on intel it seems to need -xmodel=kernel
(using solarisstudio 12.3):
--- ip_fil5.1.1/buildsunos 2011-11-15 04:39:16.000000000 -0800
+++ ip_fil5.1.1-patched/buildsunos 2012-02-28 01:11:42.455690979 -0800
@@ -98,7 +98,7 @@
XARCH32_sparc="-Xa -xildoff -xarch=v8 -xmemalign=8s"
if [ `cc -xarch=amd64 -xarch=v9 2>&1 | grep -c deprec` -eq 1 ] ; then
XARCH64_sparc="-Xa -xildoff -m64 -xmemalign=8s"
- XARCH64_i386="$XARCH32 -m64"
+ XARCH64_i386="$XARCH32 -m64 -xmodel=kernel"
else
XARCH64_sparc="-Xa -xildoff -xarch=v9 -xchip=ultra -xmemalign=8s -xcode=abs32"
XARCH64_i386="$XARCH32 -xarch=amd64 -xcode=abs32"
</tt></pre>
</blockquote>
<tt><br>
I've never required that before to build for the kernel with<br>
sun studio. I wonder what's changed...<br>
<br>
</tt>3497984 <a
href="https://sourceforge.net/tracker/?func=detail&aid=3497984&group_id=169098&atid=849053">sunstudio
12.3 build errors for kernel</a><br>
<br>
<tt><br>
<br>
</tt>
<blockquote
cite="mid:7443_1331063799_4F566BF6_7443_3081_1_20120306194442.GA21887@kafka.gedanken.org"
type="cite">
<pre wrap=""><tt>To correctly select neti instead of pfil when building a zone and neti
can't be directly checked:
</tt></pre>
</blockquote>
<tt><br>
In this set of changes, you had included explicit paths to<br>
/usr/ccs/bin/ld. Was this actually required?<br>
<br>
The script that starts the build on Solaris, buildsunos, should<br>
result in /usr/ccs/bin being placed at the start of $PATH. Was<br>
this not working for you?<br>
<br>
I think what you mean is "when building inside a zone" rather than<br>
"when building a zone", correct?<br>
<br>
<br>
</tt>
<blockquote
cite="mid:7443_1331063799_4F566BF6_7443_3081_1_20120306194442.GA21887@kafka.gedanken.org"
type="cite">
<pre wrap=""><tt>And perhaps not the best complete fix since it still harmless tries
modload but a change to make ipfboot work in a zone:
</tt></pre>
</blockquote>
<tt><br>
3497980 <a
href="https://sourceforge.net/tracker/?func=detail&aid=3497980&group_id=169098&atid=849053">ipfboot
fails in non-global zone</a><br>
<br>
Darren<br>
<br>
</tt>
</body>
</html>
--------------060707080101000402070606--