Re: RELRO and Xorg

"Tóth Attila" <[email protected]>
Newsgroups gmane.linux.gentoo.hardened
Message-ID <[email protected]>
2013.Október 25.(P) 15:18 időpontban Alexander Tsoy ezt írta:
> В Wed, 2 Oct 2013 22:58:35 +0200
> "Tóth Attila" <[email protected]> пишет:
>
>> 2013.Október 2.(Sze) 21:07 időpontban Magnus Granberg ezt írta:
>> > onsdag 02 oktober 2013 20.41.32 skrev  Alex Efros:
>> >> Hi!
>> >>
>> >> On Tue, Oct 01, 2013 at 09:21:00PM +0200, Hinnerk van Bruinehsen
>> wrote:
>> >> > > I can test proprietary nvidia if someone provide me with modified
>> >> ebuild
>> >> > > or patch or instructions what's to do.
>> >> >
>> >> > If you want to try, you could try the xorg-2.eclass from here:
>> >> I've tried both rebuilding only xorg-server first, restart X, then
>> >> rebuilde all x11-drivers/* packages and reboot (to reload kernel
>> >> module) - in both cases everything works fine with proprietary
>> nvidia.
>> >>
>> >> I've also tried nouveau and nv drivers, but got "Failed to load …
>> >> undefined symbol: …" errors (with different symbols for each driver).
>> >> Maybe this happens because some other libs should be recompiled, or
>> >> because of already loaded nvidia kernel module.
>> >
>> > When i tred nouveau and the radeaon driver i needed to define the load
>> > order of
>> > the drivers modules else i did get undefined symbols. On radeon i
>> could
>> > not
>> > even load some of the needed modules. But all this was some long time
>> ago.
>> > /Magnus
>> >
>> Aha!
>>
>> As a last step I also compiled radeon with full relro. And Xorg fails to
>> load.
>> The error message says:
>> Failed to load /usr/lib64/xorg/modules/drivers/radeon_drv.so:
>> /usr/lib64/xorg/modules/drivers/radeon_drv.so: undefined symbol:
>> exaWaitSync
>>
>> So radeon still needs lazy. But Xorg and other drivers are RELRO now.
>> I have to say the first load of X takes a bit longer than usuall - makes
>> sense because of the BIND_NOW...
>>
>> How I can define the load order of the modules?
>> I may play around with it. A bit more false sense of security! :-)
>>
>> Thx: Dw.
>
> Same problem with glamor. See comment 1 for an example of how to
> define the load order of modules.
>
> https://bugs.gentoo.org/show_bug.cgi?id=488906

Ahh, so this is the problem with glamor.
I've already figured out the way how to specify module loading order.
However I couldn't solve the radeon driver load problem with full relro.
My efforts weren't enough. Although I haven't considered fb module. So
I'll give it another try. And also retest glamor.

Thanks:
Dwokfur
-- 
dr Tóth Attila, Radiológus, 06-20-825-8057
Attila Toth MD, Radiologist, +36-20-825-8057
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.