Re: [Devil-linux-develop] DL-1.4RC1-2009-05-12 Grub Installation on USB mounted Flash Card issue and workaround

[Serge L. <fi...@in...>]

Heiko,

To fix the problem we should modify ELF section of grub binary. It can be done
either by paxctl or shpax utility. I see script for chpax in the repository but
it's enabled for 2.4 kernel only. I've checked PaX homepage and paxctl seems to
be a new replacement of shpax. So, I suggest using paxctl and remove shpax's
script.
I need your advice because my grsec experience is zero.

Serge

roy barnard wrote:
> Hi,
> 
> I just wondered, as no-one has replied, if I am the one one with this issue?
> 
> Many Thanks
> Roy.
> 
> PS Hope sending a reply to my own mail is acceptable :-)
> 
> 
> --- On Thu, 14/5/09, roy barnard <roy...@ya...> wrote:
> 
>> From: roy barnard <roy...@ya...>
>> Subject: [Devil-linux-develop] DL-1.4RC1-2009-05-12 Grub Installation on USB mounted Flash Card issue and workaround
>> To: dev...@li...
>> Date: Thursday, 14 May, 2009, 6:06 PM
>>
>> Hi,
>>
>> I have been having grub installation issues with the 1.3.7
>> and 1.4 Release streams.  I have just reproduced the
>> same issue with 1.4RC1-2009-05-12.
>>
>> What I have established is that the 'install-on-usb' script
>> when used to install to a Flash Card accessed via a /dev/sda
>> (or as applicable), the script calls grub using a shell
>> script variable:
>>
>>  
>>    grub_shell=$TMPDIR/iso-mnt/sbin/grub
>>
>> This gives (dependant on DL release) one of two types of
>> error either grub crashes or the grub fails to install
>> properbly complaining about a device mapping and/or LVM
>> issue.
>>
>> The system being used to install DL onto the flash Card
>> is:
>>
>> CentOS release 4.4 (Final)
>> With Kernal 2.6.9-42.0.8 #1 SMP i686 i386 
>> IDE HardDisk (Non-SCSI system) installed without LVM
>> configured.
>>
>> My workaround for this issue is to change the
>> 'install-on-usb' line from the above to the following:
>>      grub_shell=/sbin/grub
>>
>> I believe that this means that the Grub being installed is
>> the one from CentOS NOT the Grub shipped as part of DL.
>>
>> I appreciate that this is not a good long term fix but it
>> is allowing me to roll out 20 Internal OpenVPN Firewalls
>> using Devil Linux 1.4RC1 :-)
>>
>> I am willing to do any testing you might need in providing
>> a better solution, but I am happy with my current
>> <strikeout>fudge</strikeout> workaround shown
>> here.
>>
>> I would be interested if anyone else has found similar
>> issues and any better fixes for this grub issue.
>>
>> Thanks for all the good work
>>
>> Roy Barnard
>>
>>
>>
>>       
>>
>> ------------------------------------------------------------------------------
>> The NEW KODAK i700 Series Scanners deliver under ANY
>> circumstances! Your
>> production scanning environment may not be a perfect world
>> - but thanks to
>> Kodak, there's a perfect scanner to get the job done! With
>> the NEW KODAK i700
>> Series Scanner you'll get full speed at 300 dpi even with
>> all image 
>> processing features enabled. http://p.sf.net/sfu/kodak-com
>> _______________________________________________
>> Devil-linux-develop mailing list
>> Dev...@li...
>> https://lists.sourceforge.net/lists/listinfo/devil-linux-develop
>>
> 
> 
>       
> 
> ------------------------------------------------------------------------------
> Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT 
> is a gathering of tech-side developers & brand creativity professionals. Meet
> the minds behind Google Creative Lab, Visual Complexity, Processing, & 
> iPhoneDevCamp as they present alongside digital heavyweights like Barbarian 
> Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com 
> _______________________________________________
> Devil-linux-develop mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-develop
>