Re: linux32 chroot issue
Alexander Tiurin <[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
On Sat, 22 Feb 2014 09:20:11 -0500 "Anthony G. Basile" <[email protected]> wrote: > On 02/21/2014 05:48 PM, Alexander Tiurin wrote: > > hi! > > > > emerge return errors during build of any atoms in linux32 chroot only. > > > > (null)*(null) (null)ACCESS DENIED(null): open_wr: /dev/tty > > (null)*(null) (null)ACCESS DENIED(null): open_wr: /dev/null > > > > The full log http://pastebin.com/4An1ajY0 > > > > stat /dev/{null,tty} > > File: '/dev/null' > > Size: 0 Blocks: 0 IO Block: 4096 character > > special file > > Device: 5h/5d Inode: 1028 Links: 1 Device type: 1,3 > > Access: (0666/crw-rw-rw-) Uid: ( 0/ root) Gid: ( 0/ root) > > > > File: '/dev/tty' > > Size: 0 Blocks: 0 IO Block: 4096 character > > special file > > Device: 5h/5d Inode: 1035 Links: 1 Device type: 5,0 > > Access: (0666/crw-rw-rw-) Uid: ( 0/ root) Gid: ( 5/ tty) > > > > Kernel 3.11.7-hardened-r1 > > Kernel config > > zcat /proc/config.gz | grep -i -e grkern -e pax > > http://pastebin.com/ka63Jf98 > > > > emerge --info > > http://pastebin.com/WJ7BRXCA > > > > > > In x86_64 chroot all works fine. Also, with hardened-sources-3.2.52-r3 > > linux32 chroot works fine too. > > Please suggest any solution. > > > > > There's not enough context to really nail it, but start by trying this: > > for i in /proc/sys/kernel/grsecurity/chroot_* ; do > echo 0 > $i > done This action does not solve the issue. > > Also, can you give my your `df -a` so I can see what is mounted in the > chroot. Run that from *outside* the chroot. > > /mnt/2gb/stage4x86_hard_2 is a targeted chroot. Filesystem 1K-blocks Used Available Use% Mounted on rootfs 1998672 995724 881708 54% / proc 0 0 0 - /proc udev 10240 8 10232 1% /dev devpts 0 0 0 - /dev/pts sysfs 0 0 0 - /sys /dev/dm-3 1998672 995724 881708 54% / tmpfs 816264 608 815656 1% /run mqueue 0 0 0 - /dev/mqueue shm 4081312 416 4080896 1% /dev/shm securityfs 0 0 0 - /sys/kernel/security debugfs 0 0 0 - /sys/kernel/debug configfs 0 0 0 - /sys/kernel/config cgroup_root 10240 0 10240 0% /sys/fs/cgroup fusectl 0 0 0 - /sys/fs/fuse/connections openrc 0 0 0 - /sys/fs/cgroup/openrc cpuset 0 0 0 - /sys/fs/cgroup/cpuset cpu 0 0 0 - /sys/fs/cgroup/cpu cpuacct 0 0 0 - /sys/fs/cgroup/cpuacct /dev/mapper/main-grdesk.usr 15350768 6390764 8157188 44% /usr /dev/mapper/main-grdesk.var 10190136 407304 9242160 5% /var /dev/mapper/main-grdeskhome 175329968 92906552 74521844 56% /home /dev/mapper/main-stage4.2hard 10190136 5597264 4052200 59% /var/local/stage4.2hard /dev/mapper/main-stage4.3hard 10141624 7837812 1765600 82% /var/local/stage4.3hard /dev/mapper/main-hardened_desktop 20511356 11343344 8941916 56% /var/local/hardened_desktop none 0 0 0 - /var/local/hardened_desktop/proc /dev 10240 8 10232 1% /var/local/hardened_desktop/dev /sys 0 0 0 - /var/local/hardened_desktop/sys /dev/pts 0 0 0 - /var/local/hardened_desktop/dev/pts /dev/shm 4081312 416 4080896 1% /var/local/hardened_desktop/dev/shm /dev/mapper/2gb-2gb 1952559608 307011736 1645547872 16% /mnt/2gb none 0 0 0 - /mnt/2gb/stage4x86_hard_2/proc /dev 10240 8 10232 1% /mnt/2gb/stage4x86_hard_2/dev /sys 0 0 0 - /mnt/2gb/stage4x86_hard_2/sys /dev/pts 0 0 0 - /mnt/2gb/stage4x86_hard_2/dev/pts /dev/shm 4081312 416 4080896 1% /mnt/2gb/stage4x86_hard_2/dev/shm