[rsbac] Patch error while patching file fs/pipe.c

Amon Ott ao at rsbac.org
Thu Dec 3 08:47:44 CET 2009


On Thursday 03 December 2009 wrote 冯小平:
>  On Wednesday 02 December 2009 wrote ???:
> > > When I try to patch kernel I got this error:
> > >
> > > Hunk #21 succeeded at 1451 (offset 5 lines).
> > > patching file fs/pipe.c
> > > Hunk #11 FAILED at 1028.
> > > Hunk #12 FAILED at 1058.
> > > Hunk #13 FAILED at 1082.
> > > Hunk #14 FAILED at 1114.
> > > Hunk #15 FAILED at 1138.
> > > Hunk #16 FAILED at 1172.
> > > Hunk #17 succeeded at 1322 (offset -19 lines).
> > > Hunk #18 succeeded at 1356 (offset -19 lines).
> > > Hunk #19 succeeded at 1421 (offset -19 lines).
> > > Hunk #20 succeeded at 1535 (offset -19 lines).
> > >
> > > Please help. I have stuck into installation rsbac on my ubuntu 910
> > > server for a day.thanks a lot!
> >
> > Which patch exactly against which exact kernel version?
>
> I've tried Quick Install <http://www.rsbac.org/download/quick> in linux
> kernel 2.6.31 (Ubuntu 9.10)
> with pre-patched kernel (linux-2.6.31.6-rsbac-1.4.3.tar.bz2)
> and patch yourself ( patch-linux-2.6.31.6-rsbac-1.4.3.diff.bz2 and
> rsbac-common-2.6-1.4.3.tar.bz2) two methods.

It seems that you Ubuntu kernel misses a recent bugfix, or it fixes the bug 
differently.

The 1.4.3 patch does not work with kernels < 2.6.31.6, there has been a 
security bugfix in fs/pipe.c between .5 and .6, which conflicts. You can 
either patch RSBAC in by hand, add .6 security fix before RSBAC, use our 
pipe.c from svn (link below) or use our pre-patched kernel.

http://svn.rsbac.org/?do=view&project=rsbac-2.6&path=/trunk/fs/pipe.c&rev=HEAD&raw=1

Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22


More information about the rsbac mailing list