Bug 39626
| Summary: | 5.10.11-un-def-alt1 cannot be booted with p_lkrg module | ||
|---|---|---|---|
| Product: | Sisyphus | Reporter: | Vitaly Chikunov <vt> |
| Component: | kernel-modules-lkrg-un-def | Assignee: | kotopesutility <kotopesutility> |
| Status: | CLOSED FIXED | QA Contact: | qa-sisyphus |
| Severity: | normal | ||
| Priority: | P5 | CC: | boyarsh, glebfm, kernelbot, kotopesutility, ldv, mike, rider, sbolshakov, shrek, sin, vitty, vsu, vt, zerg |
| Version: | unstable | ||
| Hardware: | x86 | ||
| OS: | Linux | ||
Maybe related issue https://github.com/openwall/lkrg/issues/38 The same behavior with 5.4.93-std-def-alt1 -
~~~
[ 0.000000] Linux version 5.4.93-std-def-alt1 (builder@localhost.localdomain) (gcc version 10.2.1 20201125 (ALT Sisyphus 10.2.1-alt2) (GCC)) #1 SMP Thu Jan 28 08:23:20 UTC 2021
[ 0.000000] Command line: BOOT_IMAGE=/boot/vmlinuz root=UUID=56b25751-2d48-4138-99ac-7e48a8ecbf63 ro nokaslr panic=0 console=ttyS1,115200 kgdboc=ttyS1,115200 crashkernel=128M@16M *
...
Starting Linux Kernel Runtime Guard...
Starting Flush Journal to Persistent Storage...
Starting File System Quota Check...
Starting Load/Save Random Seed...
Starting Create Static Device Nodes in /dev...
[ OK ] Finished File System Quota Check.
Starting Enable File System Quotas...
[ 11.169966] p_lkrg: loading out-of-tree module taints kernel.
[ 11.175855] p_lkrg: module verification failed: signature and/or required key missing - tainting kernel
[ 11.186760] [p_lkrg] Loading LKRG...
[ 11.192466] Freezing user space processes ... (elapsed 0.063 seconds) done.
[ 11.262638] OOM killer disabled.
[ 11.514906] [p_lkrg] [kretprobe] register_kretprobe() for <ovl_create_or_link> failed! [err=-22]
[ 11.523684] [p_lkrg] Trying to find ISRA / CONSTPROP name for <ovl_create_or_link>
[ 11.564012] [p_lkrg] [kretprobe] register_kretprobe() for ovl_create_or_link failed and ISRA / CONSTPROP version not found!
[ 11.575129] [p_lkrg] Can't hook 'ovl_create_or_link' function. This is expected if you are not using OverlayFS.
[ 11.800500] [p_lkrg] LKRG initialized successfully!
[ 11.805387] OOM killer enabled.
[ 11.808533] Restarting tasks ... done.
[ OK ] Finished Linux Kernel Runtime Guard.
...
[ 14.358492] [p_lkrg] ALERT !!! MODULE KOBJ HASH IS DIFFERENT !!! - it is [0x24e6d44b10b6e5f1] and should be [0x26c43d4f096283b1] !!!
[ 14.362356] cpufreq: Registered transition notifiers:
[ 14.374248] [p_lkrg] ALERT !!! SYSTEM HAS BEEN COMPROMISED - DETECTED DIFFERENT 1 CHECKSUMS !!!
[ 14.374253] Kernel panic - not syncing: [p_lkrg] Kernel Integrity verification failed! Killing the kernel...
[ 14.379320] cpufreq: p_freq_transition_notifier+0x0/0x20 [p_lkrg]
[ 14.387998] CPU: 6 PID: 641 Comm: kworker/u66:7 Tainted: G OE 5.4.93-std-def-alt1 #1
[ 14.388001] Hardware name: Supermicro Super Server/H11DSi, BIOS 1.2 04/15/2019
[ 14.388014] Workqueue: events_unbound p_check_integrity [p_lkrg]
[ 14.398941] cpufreq: CPU16: Fast frequency switching not enabled
[ 14.403915] Call Trace:
[ 14.403922] dump_stack+0x7c/0x94
[ 14.403928] panic+0x10d/0x2fb
[ 14.412887] cpufreq: Registered transition notifiers:
[ 14.420108] p_check_integrity.cold+0x1693/0x1e7e [p_lkrg]
[ 14.420113] ? __switch_to+0x38a/0x460
[ 14.426121] cpufreq: p_freq_transition_notifier+0x0/0x20 [p_lkrg]
[ 14.432120] ? __switch_to_asm+0x34/0x70
[ 14.432124] process_one_work+0x1e8/0x3e0
[ 14.432127] worker_thread+0x11d/0x470
[ 14.432130] ? process_one_work+0x3e0/0x3e0
[ 14.435364] cpufreq: CPU17: Fast frequency switching not enabled
[ 14.437900] kthread+0x117/0x130
[ 14.437903] ? __kthread_bind_mask+0x60/0x60
[ 14.437905] ret_from_fork+0x22/0x40
[ 14.440971] Kernel Offset: disabled
[ 14.501458] ---[ end Kernel panic - not syncing: [p_lkrg] Kernel Integrity verification failed! Killing the kernel... ]---
~~~
(Ответ для Vitaly Chikunov на комментарий #1) > Maybe related issue https://github.com/openwall/lkrg/issues/38 Authors comment: This isn't merely "maybe related", but it's a required fix for loading LKRG into kernel versions this recent. There's no point in trying to use non-updated LKRG on those very recent kernels. You really need to update LKRG to the latest first. |
Description
Vitaly Chikunov 2021-01-30 15:24:25 MSKBoot log: ~~~ [ 0.000000] Linux version 5.10.11-un-def-alt1 (builder@localhost.localdomain) (gcc-10 (GCC) 10.2.1 20201125 (ALT Sisyphus 10.2.1-alt2), GNU ld (GNU Binutils) 2.35.1.20210104) #1 SMP PREEMPT Thu Jan 28 08:45:47 UTC 2021 [ 0.000000] Command line: BOOT_IMAGE=/boot/vmlinuz root=UUID=56b25751-2d48-4138-99ac-7e48a8ecbf63 ro nokaslr panic=0 console=ttyS1,115200 kgdboc=ttyS1,115200 crashkernel=128M@16Mkeys to select which entry is highlighted. ... Starting Enable File System Quotas... [ 12.962322] p_lkrg: loading out-of-tree module taints kernel. [ 12.968231] p_lkrg: module verification failed: signature and/or required key missing - tainting kernel [ 12.979584] [p_lkrg] Loading LKRG... [ 13.004701] Freezing user space processes ... (elapsed 0.039 seconds) done. [ 13.051050] OOM killer disabled. [ 13.243336] [p_lkrg] [kretprobe] register_kretprobe() for <ovl_create_or_link> failed! [err=-22] [ 13.252115] [p_lkrg] Trying to find ISRA / CONSTPROP name for <ovl_create_or_link> [ 13.297984] [p_lkrg] [kretprobe] register_kretprobe() for ovl_create_or_link failed and ISRA / CONSTPROP version not found! [ 13.309105] [p_lkrg] Can't hook 'ovl_create_or_link' function. This is expected if you are not using OverlayFS. [ 13.607687] [p_lkrg] LKRG initialized successfully! [ 13.612572] OOM killer enabled. [ 13.615713] Restarting tasks ... done. [ OK ] Finished Linux Kernel Runtime Guard. Starting Apply Kernel Variables... [ OK ] Finished Coldplug All udev Devices. [ OK ] Finished Load/Save Random Seed. [ OK ] Finished Apply Kernel Variables. [ OK ] Finished Create Static Device Nodes in /dev. [ OK ] Reached target Local File Systems (Pre). Mounting /tmp... [ OK ] Reached target Containers. Starting Rule-based Manage…for Device Events and Files... [ OK ] Finished Enable File System Quotas. [ OK ] Mounted /tmp. [ OK ] Reached target Local File Systems. [ OK ] Reached target Remote File Systems. Starting Restore /run/initramfs on shutdown... [ OK ] Finished Restore /run/initramfs on shutdown. [ OK ] Started Rule-based Manager for Device Events and Files. [ 15.371395] acpi_cpufreq: overriding BIOS provided _PSD data [ 15.377123] cpufreq: CPU0: Fast frequency switching not enabled [ 15.383069] cpufreq: Registered transition notifiers: [ 15.388138] cpufreq: p_freq_transition_notifier+0x0/0x20 [p_lkrg] [ 15.394432] cpufreq: CPU1: Fast frequency switching not enabled [ 15.400384] cpufreq: Registered transition notifiers: [ 15.405443] cpufreq: p_freq_transition_notifier+0x0/0x20 [p_lkrg] [ 15.411849] cpufreq: CPU2: Fast frequency switching not enabled [ 15.417790] cpufreq: Registered transition notifiers: [ 15.422867] cpufreq: p_freq_transition_notifier+0x0/0x20 [p_lkrg] [ 15.429134] cpufreq: CPU3: Fast frequency switching not enabled [ 15.435706] cpufreq: Registered transition notifiers: [ 15.440772] cpufreq: p_freq_transition_notifier+0x0/0x20 [p_lkrg] [ 15.447475] cpufreq: CPU4: Fast frequency switching not enabled [ 15.453428] cpufreq: Registered transition notifiers: [ 15.457395] [p_lkrg] ALERT !!! MODULE KOBJ HASH IS DIFFERENT !!! - it is [0x2abcc369e03265e3] and should be [0x86f646407c703dbb] !!! [ 15.458618] cpufreq: p_freq_transition_notifier+0x0/0x20 [p_lkrg] [ 15.470395] [p_lkrg] ALERT !!! SYSTEM HAS BEEN COMPROMISED - DETECTED DIFFERENT 1 CHECKSUMS !!! [ 15.470400] Kernel panic - not syncing: [p_lkrg] Kernel Integrity verification failed! Killing the kernel... [ 15.470406] CPU: 0 PID: 8 Comm: kworker/u65:0 Tainted: G OE 5.10.11-un-def-alt1 #1 [ 15.470408] Hardware name: Supermicro Super Server/H11DSi, BIOS 1.2 04/15/2019 [ 15.470430] Workqueue: events_unbound p_check_integrity [p_lkrg] [ 15.477462] cpufreq: CPU5: Fast frequency switching not enabled [ 15.485199] [ 15.485201] Call Trace: [ 15.485216] dump_stack+0x83/0x9b [ 15.495035] cpufreq: Registered transition notifiers: [ 15.503816] panic+0x114/0x302 [ 15.503834] p_check_integrity.cold+0x1693/0x1e7e [p_lkrg] [ 15.503846] ? trampoline_handler+0x4c/0x60 [ 15.511096] cpufreq: p_freq_transition_notifier+0x0/0x20 [p_lkrg] [ 15.517066] process_one_work+0x1d6/0x3a0 [ 15.517073] worker_thread+0x4d/0x3d0 [ 15.523245] cpufreq: CPU6: Fast frequency switching not enabled [ 15.524490] ? process_one_work+0x3a0/0x3a0 [ 15.524498] kthread+0x133/0x150 [ 15.527612] cpufreq: Registered transition notifiers: [ 15.530272] ? __kthread_bind_mask+0x60/0x60 [ 15.530281] ret_from_fork+0x22/0x30 [ 15.535337] cpufreq: p_freq_transition_notifier+0x0/0x20 [p_lkrg] [ 15.543882] Kernel Offset: disabled [ 15.603689] ---[ end Kernel panic - not syncing: [p_lkrg] Kernel Integrity verification failed! Killing the kernel... ]--- ~~~ Module info: ~~~ /lib/modules/5.10.11-un-def-alt1# modinfo ./misc/p_lkrg.ko filename: /lib/modules/5.10.11-un-def-alt1/./misc/p_lkrg.ko license: GPL v2 description: pi3's Linux kernel Runtime Guard author: Adam 'pi3' Zabrocki (http://pi3.com.pl) srcversion: 5E71353E58F669DF3BAADC2 ~~~ ~~~ # rpm -ql kernel-modules-lkrg-un-def-0.8.1+git20201210-alt1.330251.1.x86_64 /etc/rc.d/init.d/lkrg /lib/modules/5.10.11-un-def-alt1/misc/p_lkrg.ko /lib/systemd/system-preset/30-lkrg.preset /lib/systemd/system/lkrg.service ~~~