mainDazuko - Support: sr #106066, Dazuko fails under 2.6.22-14 kernel

 
 

sr #106066: Dazuko fails under 2.6.22-14 kernel

Submitter:  bill <shomboli>
Submitted:  Fri 26 Oct 2007 03:38:09 AM UTC
   
 
Assigned to:  ogman Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Mon 29 Oct 2007 08:43:03 AM UTC, comment #13: 

Yes, the version of apparmor shipped with Ubuntu does not work together with Dazuko. The latest version of apparmor (available in openSUSE 10.3) does allow Dazuko to be loaded. I assume this version will eventually be included in Ubuntu.

This was also mentioned here:

http://savannah.nongnu.org/support/?106067

John Ogness <ogman>
Group administrator
Sat 27 Oct 2007 09:16:12 PM UTC, comment #12: 

Success! I got Dazuko-2.3.4 and AntiVir working by changing the /etc/modprobe.d/dazuko file to:
install dazuko modprobe -r apparmor;\
modprobe -i dazuko; \
modprobe -i apparmor

I had edited it weeks ago to enable dazuko to work with the old kernel:
install dazuko modprobe -r capability;\
modprobe -i dazuko; \
modprobe -i capability

I seem to have broken apparmor now, though:  apparmor_status
apparmor module is not loaded.

More head-scratching going on here!

bill <shomboli>
Sat 27 Oct 2007 07:49:35 PM UTC, comment #11: 

I figured out how to delete the hidden dazuko directory, and it looks like the install went cleanly:

bill@djk0dc31:~$ wget www.dazuko.org/files/dazuko-2.3.4.tar.gz
--15:10:14--  http://www.dazuko.org/files/dazuko-2.3.4.tar.gz
           => `dazuko-2.3.4.tar.gz'
Resolving www.dazuko.org... 82.165.105.216
Connecting to www.dazuko.org|82.165.105.216|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 182,144 (178K) [application/x-tar]

100%[====================================>] 182,144       35.86K/s    ETA 00:00

15:10:20 (35.78 KB/s) - `dazuko-2.3.4.tar.gz' saved [182144/182144]

bill@djk0dc31:~$ sudo tar xzvf dazuko-2.3.4.tar.gz
[sudo] password for bill:
dazuko-2.3.4/
dazuko-2.3.4/README
dazuko-2.3.4/LICENSE.GPL
dazuko-2.3.4/configure
dazuko-2.3.4/dazuko_freebsd.c
dazuko-2.3.4/dazuko_freebsd.h
dazuko-2.3.4/dazuko_linux.c
dazuko-2.3.4/dazuko_linux.h
dazuko-2.3.4/dazuko_platform.h
dazuko-2.3.4/dazukoio_trusted_core.c
dazuko-2.3.4/example_php/
dazuko-2.3.4/example_php/README
dazuko-2.3.4/dazukoio.h
dazuko-2.3.4/dazuko_transport.h
dazuko-2.3.4/dazukoio_dummyos.h
dazuko-2.3.4/dazukoio_core.h
dazuko-2.3.4/example_java/
dazuko-2.3.4/example_java/org/
dazuko-2.3.4/example_java/org/dazuko/
dazuko-2.3.4/example_java/org/dazuko/Dazuko.java
dazuko-2.3.4/example_java/org/dazuko/DazukoAccess.java
dazuko-2.3.4/example_java/README
dazuko-2.3.4/example_java/dazuko_jni.c
dazuko-2.3.4/example_java/org_dazuko_Dazuko.h
dazuko-2.3.4/example_java/Example.java
dazuko-2.3.4/example_c/
dazuko-2.3.4/example_c/example.c
dazuko-2.3.4/example_c/example_mt.c
dazuko-2.3.4/LICENSE.BSD
dazuko-2.3.4/COPYING
dazuko-2.3.4/dazuko_linux26.c
dazuko-2.3.4/dazuko_linux26.h
dazuko-2.3.4/dazuko_call.h
dazuko-2.3.4/dazuko_freebsd5.c
dazuko-2.3.4/dazuko_freebsd5.h
dazuko-2.3.4/dazuko_rsbac.c
dazuko-2.3.4/dazuko_rsbac.h
dazuko-2.3.4/example_perl/
dazuko-2.3.4/example_perl/t/
dazuko-2.3.4/example_perl/t/t01.t
dazuko-2.3.4/example_perl/t/t02.t
dazuko-2.3.4/example_perl/t/t03.t
dazuko-2.3.4/example_perl/t/t04.t
dazuko-2.3.4/example_perl/t/autounblock.inc
dazuko-2.3.4/example_perl/t/t05.t
dazuko-2.3.4/example_perl/Access.pm
dazuko-2.3.4/example_perl/Example.pl
dazuko-2.3.4/example_perl/ExampleOO.pl
dazuko-2.3.4/example_perl/IO.pm
dazuko-2.3.4/example_perl/IO.xs
dazuko-2.3.4/example_perl/Makefile.PL
dazuko-2.3.4/example_perl/Obj.pm
dazuko-2.3.4/example_perl/README
dazuko-2.3.4/example_perl/ExampleThr.pl
dazuko-2.3.4/example_python/
dazuko-2.3.4/example_python/MANIFEST
dazuko-2.3.4/example_python/README
dazuko-2.3.4/example_python/dazukomodule.c
dazuko-2.3.4/example_python/example.py
dazuko-2.3.4/example_python/setup.py
dazuko-2.3.4/dazuko_linux26_lsm.h
dazuko-2.3.4/dazuko_linux26_lsm.c
dazuko-2.3.4/linux_conf.c
dazuko-2.3.4/linux_lsm_conf
dazuko-2.3.4/README.linux26
dazuko-2.3.4/patch_dpath.diff
dazuko-2.3.4/dazuko_dummyos.h
dazuko-2.3.4/dazuko_dummyos.c
dazuko-2.3.4/dazuko_events.h
dazuko-2.3.4/dazukoio_linux_compat1.h
dazuko-2.3.4/dazukoio_linux_compat1.c
dazuko-2.3.4/example_lua/
dazuko-2.3.4/example_lua/Makefile
dazuko-2.3.4/example_lua/README
dazuko-2.3.4/example_lua/config.lua
dazuko-2.3.4/example_lua/example.c
dazuko-2.3.4/example_lua/example.lua
dazuko-2.3.4/example_lua/libdazuko.c
dazuko-2.3.4/dazukoio_dummyos.c
dazuko-2.3.4/dazukoio_platform.h
dazuko-2.3.4/dazukoio_unix.h
dazuko-2.3.4/dazukoio_unix.c
dazuko-2.3.4/dazukoio_core.c
dazuko-2.3.4/example_ruby/
dazuko-2.3.4/example_ruby/Dazuko.c
dazuko-2.3.4/example_ruby/README
dazuko-2.3.4/example_ruby/example.rb
dazuko-2.3.4/example_ruby/extconf.rb
dazuko-2.3.4/example_ruby/test.rb
dazuko-2.3.4/dazuko_core.h
dazuko-2.3.4/dazuko_core.c
dazuko-2.3.4/README.trusted
dazuko-2.3.4/dazukoio_trusted.h
dazuko-2.3.4/dazuko_transport.c
dazuko-2.3.4/dazuko_version.h
dazuko-2.3.4/linux_dev_conf
dazuko-2.3.4/CHANGELOG
dazuko-2.3.4/patch_fsecure_init_event.diff
bill@djk0dc31:~$ cd dazuko-2.3.4
bill@djk0dc31:~/dazuko-2.3.4$ sudo ./configure --without-dep
checking host system type... Linux
checking for make utility... ok (make)
checking for C compiler... ok (cc)
kernel source in /lib/modules/2.6.22-14-generic/source... no
kernel build source in /lib/modules/2.6.22-14-generic/build... yes
kernel source in /lib/modules/2.6.22-14-generic/build... yes
acquiring Linux kernel code configuration... ok
checking if Linux is RSBAC patched... no
checking if devfs is enabled... no
discovered host system... Linux (2.6.22)
checking if security module support is enabled... yes
verifying capabilities are not built-in... ok
locating LSM API header... ok
identifying LSM API (this can take a while)... ok
identifying device API... ok
inspecting class type... ok (class)
inspecting suspend function... ok (suspend2)
inspecting task_struct structure... ok (using parent)
disabling ON_CLOSE events (not available for Linux 2.6 LSM)
configure: creating Makefile
configure: creating library/Makefile
configure: creating example_c/Makefile

./configure successful

=======================
 Configuration summary
=======================

module events = ON_OPEN ON_EXEC
devfs support = no
rsbac support = no
stacking support = yes
module debug = no
library 1.x compatibility = yes

bill@djk0dc31:~/dazuko-2.3.4$ sudo make
make -C /lib/modules/2.6.22-14-generic/build SUBDIRS="/home/bill/dazuko-2.3.4" modules
make[1]: Entering directory `/usr/src/linux-headers-2.6.22-14-generic'
  CC [M]  /home/bill/dazuko-2.3.4/dazuko_core.o
  CC [M]  /home/bill/dazuko-2.3.4/dazuko_transport.o
  CC [M]  /home/bill/dazuko-2.3.4/dazuko_linux26_lsm.o
  CC [M]  /home/bill/dazuko-2.3.4/dazuko_linux26.o
  LD [M]  /home/bill/dazuko-2.3.4/dazuko.o
  Building modules, stage 2.
  MODPOST 1 modules
  CC      /home/bill/dazuko-2.3.4/dazuko.mod.o
  LD [M]  /home/bill/dazuko-2.3.4/dazuko.ko
make[1]: Leaving directory `/usr/src/linux-headers-2.6.22-14-generic'
touch dummy_rule
bill@djk0dc31:~/dazuko-2.3.4$ sudo make install
/lib/modules/2.6.22-14-generic/extra/dazuko.ko
!! a dazuko module is already installed !!
!! please delete the old version before installing this one !!
make: * [install] Error 1

bill@djk0dc31:~/dazuko-2.3.4$ cd /lib/modules/2.6.22-14-generic/extra/
bill@djk0dc31:/lib/modules/2.6.22-14-generic/extra$ ls
dazuko.ko
bill@djk0dc31:/lib/modules/2.6.22-14-generic/extra$ sudo rm dazuko.ko

bill@djk0dc31:~$ cd dazuko-2.3.4
bill@djk0dc31:~/dazuko-2.3.4$ sudo make install
mkdir -p /lib/modules/2.6.22-14-generic/extra
cp dazuko.ko /lib/modules/2.6.22-14-generic/extra
/sbin/depmod -ae
bill@djk0dc31:~/dazuko-2.3.4$


But I'm still trying to get it to work. Modprobe dazuko gives me the following:

bill@djk0dc31:~$ sudo modprobe dazuko
[sudo] password for bill:
FATAL: Error inserting dazuko (/lib/modules/2.6.22-14-generic/extra/dazuko.ko): Invalid argument
FATAL: Error inserting capability (/lib/modules/2.6.22-14-generic/kernel/security/capability.ko): Invalid argument
FATAL: Error running install command for dazuko

What could be wrong now?

bill <shomboli>
Sat 27 Oct 2007 06:17:39 PM UTC, comment #10: 

Could you suggest how I could clean it up so it works? Where should I put the new dazuko directory? Thanks for your help!

bill <shomboli>
Sat 27 Oct 2007 02:37:17 PM UTC, comment #9: 

It works fine. I also use Gutsy. Your problem in Comment #7 is because you didn't start with a fresh dazuko directory (there were still object files laying around from your previous attempts).

John Ogness <ogman>
Group administrator
Sat 27 Oct 2007 05:11:00 AM UTC, comment #8: 

I did manage to re-install dazuko-3.3.3.1 under the 2.6.20-16 kernel, and Dazuko and Avguard work when booted from that kernel. I guess I'll boot from that kernel when going online or running AntiVir, until you guys make Dazuko compatible with Ubuntu 7.10's 2.6.22-14 kernel.

bill <shomboli>
Sat 27 Oct 2007 01:39:41 AM UTC, comment #7: 

Here's a log of my attempt:

bill@djk0dc31:~/dazuko-2.3.4$ sudo ./configure --without-dep
checking host system type... Linux
checking for make utility... ok (make)
checking for C compiler... ok (cc)
kernel source in /lib/modules/2.6.22-14-generic/source... no
kernel build source in /lib/modules/2.6.22-14-generic/build... yes
kernel source in /lib/modules/2.6.22-14-generic/build... yes
acquiring Linux kernel code configuration... ok
checking if Linux is RSBAC patched... no
checking if devfs is enabled... no
discovered host system... Linux (2.6.22)
checking if security module support is enabled... yes
verifying capabilities are not built-in... ok
locating LSM API header... ok
identifying LSM API (this can take a while)... ok
identifying device API... ok
inspecting class type... ok (class)
inspecting suspend function... ok (suspend2)
inspecting task_struct structure... ok (using parent)
disabling ON_CLOSE events (not available for Linux 2.6 LSM)
configure: creating Makefile
configure: creating library/Makefile
configure: creating example_c/Makefile

./configure successful

=======================
 Configuration summary
=======================

module events = ON_OPEN ON_EXEC
devfs support = no
rsbac support = no
stacking support = yes
module debug = no
library 1.x compatibility = yes

bill@djk0dc31:~/dazuko-2.3.4$ make
make: `dummy_rule' is up to date.
bill@djk0dc31:~/dazuko-2.3.4$ sudo make install
/lib/modules/2.6.22-14-generic/extra/dazuko.ko
!! a dazuko module is already installed !!
!! please delete the old version before installing this one !!
make: * [install] Error 1

bill <shomboli>
Fri 26 Oct 2007 11:18:00 PM UTC, comment #6: 

I tried your method, but it didn't work, and kept giving errors; so I tried fixing the files it complained about, and now dazuko won't work with the old kernel, either.

bill <shomboli>
Fri 26 Oct 2007 07:31:34 AM UTC, comment #5: 

Ok. Thank you very much for your help.

Everything is working fine.

Damian

Damian Hischier <damian>
Fri 26 Oct 2007 07:19:32 AM UTC, comment #4: 

Using "--mapfile" is also not necessary. This was only important if you use "--enable-syscalls".

With openSUSE 10.3 it should be enough to use only the "--without-dep" argument. (I should probably change the configure script so that "--without-dep" is the default. It is a fairly new option and allows you to build Dazuko without required root priviledges.)

John Ogness <ogman>
Group administrator
Fri 26 Oct 2007 07:11:49 AM UTC, comment #3: 

Perfect! Thank you very much for your help.

I have included the --enable-syscalls because it was mentioned in the FAQ 2.2 "What are the known issues with SuSE Linux?" If I understand that right i doesn't apply anymore. What about the --mapfile=/path/to/mapfile option?

Thank you very much

Damian

Damian Hischier <damian>
Fri 26 Oct 2007 07:01:42 AM UTC, comment #2: 

@shomboli: Since you have a new kernel, you also need to build a new Dazuko kernel module. Quick guide:

$ wget http://www.dazuko.org/files/dazuko-2.3.4.tar.gz
$ tar xzvf dazuko-2.3.4.tar.gz
$ cd dazuko-2.3.4
$ ./configure --without-dep
$ make
$ sudo make install

That should do it.

@damian: You seem to be configuring using "--enable-syscalls". For openSUSE you do not need syscall hooking. The above commands should also work for you.

John Ogness <ogman>
Group administrator
Fri 26 Oct 2007 06:07:33 AM UTC, comment #1: 

I have also a problem with the kernerl 2.6.22.9 on openSUSE 10.3. I'm not able to compile dazuko with this kernel. I get the following error message:

CC [M]  /home/damian/src/dazuko-2.3.4/dazuko_linux.o
/home/damian/src/dazuko-2.3.4/dazuko_linux.c:90: error: conflicting types for ‘__d_path’
/usr/src/linux-2.6.22.9-0.4/include/linux/dcache.h:303: error: previous declaration of ‘__d_path’ was here
make[4]: * [/home/damian/src/dazuko-2.3.4/dazuko_linux.o] Error 1
make[3]: * [_module_/home/damian/src/dazuko-2.3.4] Error 2
make[2]: * [modules] Error 2
make[1]: * [modules] Error 2
make[1]: Leaving directory `/usr/src/linux-2.6.22.9-0.4-obj/x86_64/default'
make: * [dummy_rule] Error 2

I tried ./configure with the --disable-local-dpath, but it didn't change anything.

Is there a work-around for this problem?

Damian Hischier <damian>
Fri 26 Oct 2007 03:38:09 AM UTC, original submission:  

I have Ubuntu installed, and I installed Dazuko and AntiVir a few weeks ago, and it worked as it was supposed to on FeistyFawn. Last weekend I upgraded to Gutsy Gibbon, and avguard doesn't work under the new 2.6.22-14 kernel: "avguard status" results in " avguard-workstation (Dazuko unavailable, 0 daemons)." However, it still works if I boot the old 2.6.20-16 kernel. Apparently Dazuko 2.3.3-1 isn't compatible with the new kernel. Is there a work-around? Is the new dazuko-2.3.4 compatible with the new Ubuntu kernel?

bill <shomboli>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by ogman (Posted a comment)
  • -email is unavailable- added by damian (Posted a comment)
  • -email is unavailable- added by shomboli (Submitted the item)
  •  

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2007-10-27 ogman Open/ClosedOpen Closed
    2007-10-26 ogman Assigned toNone ogman

    Back to the top

    Powered by Savane 3.13-02a9.
    Corresponding source code