Re: CONFIG_SECURITY_ROOTPLUG [was: Re: 2.6.27-rc7 no init found on the root partition?]

Previous thread: [patch 4/6] kmsg: convert xpram messages to kmsg api. by Martin Schwidefsky on Thursday, September 25, 2008 - 9:28 am. (1 message)

Next thread: SMACK startproc patch by Tilman Baumann on Thursday, September 25, 2008 - 9:27 am. (1 message)
From: Lukas Hejtmanek
Date: Thursday, September 25, 2008 - 9:54 am

Hello,

I finally found my problems with no init found.

It was caused by the CONFIG_SECURITY_ROOTPLUG option.

I wonder why this option in 2.6.26.3 kernel allows the kernel boot up, while
with 2.6.27-rc7, the kernel is unable to run even init.

-- 
Lukáš Hejtmánek
--

From: Serge E. Hallyn
Date: Thursday, September 25, 2008 - 7:49 pm

Hmm, is there a difference in the device drivers such that root_plug simply
isn't able to find the usb 'key' in 2.6.27-rc7?

When you boot with CONFIG_SECURITY_ROOTPLUG=n, can you read the usb key?

-serge
--

From: Lukas Hejtmanek
Date: Friday, September 26, 2008 - 3:05 am

I do not have USB key at all. So maybe there is a security bug in 2.6.26.3?

-- 
Lukáš Hejtmánek
--

From: Valdis.Kletnieks
Date: Friday, September 26, 2008 - 3:50 am

6.3?

It must be a bug in 26.3 - if you don't have the proper USB dongle/key/wh=
atever
inserted, it shouldn't have come up.
From: Greg KH
Date: Monday, September 29, 2008 - 4:11 pm

If you enable that option, you have to have the specific USB device
plugged into your system in order for any process to run as root (like
init).

So, odds are you don't have this specific device, so either specify a
different device id, or don't build it into your kernel :)

thanks,

greg k-h
--

Previous thread: [patch 4/6] kmsg: convert xpram messages to kmsg api. by Martin Schwidefsky on Thursday, September 25, 2008 - 9:28 am. (1 message)

Next thread: SMACK startproc patch by Tilman Baumann on Thursday, September 25, 2008 - 9:27 am. (1 message)