Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <5128133.1140419840070.SLOX.WebMail.wwwrun@mail.fischer-ing.de>
Date: Mon, 20 Feb 2006 08:17:20 +0100 (CET)
From: Bernhard Fischer <bernhard@...chli.org>
To: owl-users@...ts.openwall.com
Subject: Re: cisco vpnclient

Am Fr 17.02.2006 21:41 schrieb Solar Designer <solar@...nwall.com>:

> On Fri, Feb 17, 2006 at 08:31:37PM +0100, Bernhard Fischer wrote:
> > That is the relevant part from the driver_build.sh script:
> > #########snip###########
> > INCLUDES="-I. -I${KSRCDIR}/include"
> > CFLAGS="-O2 -DCNI_LINUX_INTERFACE -D__KERNEL__ -DMODULE
> > -D_LOOSE_KERNEL_NAMES -DHAVE_CONFIG_H"
> 
> Note the lack of -DMODVERSIONS here. Also, if your kernel is built for
> SMP, there must be -D__SMP__ here.

Yes, you are right.

> 
> > rpm!root:~/vpnclient# ./driver_build.sh /usr/src/linux
> 
> FWIW, it is not a good idea to be compiling stuff as root.  We've got
> pseudo-user "sources" for compiling the kernel and kernel modules.

hey Alexander, you are so strict ;-)
it's only a test-machine ... but i'll accept your suggestion and i will
do better next time

> 
> > rpm!root:~/vpnclient# insmod ./cisco_ipsec
> > ./cisco_ipsec: ./cisco_ipsec: unresolved symbol eth_type_trans
> > ./cisco_ipsec: ./cisco_ipsec: unresolved symbol __kfree_skb
> > ./cisco_ipsec: ./cisco_ipsec: unresolved symbol alloc_skb
> > ./cisco_ipsec: ./cisco_ipsec: unresolved symbol htons
> > ./cisco_ipsec: ./cisco_ipsec: unresolved symbol skb_under_panic
> > ./cisco_ipsec: ./cisco_ipsec: unresolved symbol kmalloc
> [...]
> 
> So it fails to find even the most essential symbols.  My guess is that
> you have the kernel built with CONFIG_MODVERSIONS, but you are not
> building the module in the same way.  You need to either rebuild the
> kernel without modversions or build the module with modversions as
> well.

Once again you saved my day!
It doesn't help to define MODVERSIONS inside the buildscript. I had to
turn off CONFIG_MODVERSIONS in the kernelconfiguration.

> 
> -- 
> Alexander Peslyak <solar at openwall.com>
> GPG key ID: B35D3598 fp: 6429 0D7E F130 C13E C929 6447 73C3 A290 B35D
> 3598
> http://www.openwall.com - bringing security into open computing
> environments
> 
> Was I helpful? Please give your feedback here:
> http://rate.affero.net/solar

Thanks a lot
Bernhard

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.