Should I pull some specific commits from smack kenrel at gitorious for
patching? or Where else  can I find related patches?


2014-04-09 19:29 GMT+05:30 Schaufler, Casey <[email protected]>:

>  It appears that you do not have a kernel with smkfstransmute support. It
> is in upstream as of 3.13. You need to bring your kernel up to date with
> the current Smack patches. They have not all gotten into upstream yet.
> That's a project in the works.
>
>
>
>
>
> *From:* Kishore Sheik Ahamed [mailto:[email protected]]
> *Sent:* Wednesday, April 09, 2014 12:29 AM
> *To:* Schaufler, Casey
> *Cc:* Clark, Joel; Kishore Sheik Ahamed; [email protected]
> *Subject:* Re: Firmware will not load from filesystem during boot
>
>
>
> Thanks Joel/Casey.
>
> Smack was not enabled in the kernel and enabling it results in kernel
> panic on boot while mounting something after loading smack policies and
> systemd exits.
>
> I have enabled all the kernel configs from systemd readme. Is there
> anything else that I missed?
>
> Log follows
>
>
> [    3.820861] EXT4-fs (mmcblk0p2): mounted filesystem with ordered data
> mode. Opts: (null)
> [    3.829498] VFS: Mounted root (ext4 filesystem) on device 179:2.
> [    3.837249] devtmpfs: mounted
> [    3.840698] Freeing init memory: 376K
> [    4.277008] systemd[1]: Successfully loaded Smack policies.
> [    4.284820] systemd[1]: Successfully loaded Smack/CIPSO policies.
> [    4.305297] tmpfs: Bad mount option smackfstransmute
> [    4.401947] Unable to handle kernel NULL pointer dereference at virtual
> address 00000028
> [    4.410461] pgd = edf88000
> [    4.413330] [00000028] *pgd=ac840831, *pte=00000000, *ppte=00000000
> [    4.419952] Internal error: Oops: 17 [#1] PREEMPT SMP ARM
> [    4.425659] Modules linked in:
> [    4.428863] CPU: 1    Not tainted  (3.8.13-53369-g6dbdea7 #8)
> [    4.434936] PC is at __lock_acquire+0x58/0x1a9c
> [    4.439727] LR is at lock_acquire+0x9c/0x128
> [    4.444244] pc : [<c0091148>]    lr : [<c00930a4>]    psr: 20000093
> [    4.444244] sp : ed897c60  ip : 00000001  fp : c0e4a1f4
> [    4.456329] r10: 00000000  r9 : 00000000  r8 : c0e5c16c
> [    4.461853] r7 : ed8953c0  r6 : c0e91adc  r5 : 00000028  r4 : 00000002
> [    4.468719] r3 : 00000000  r2 : 00000000  r1 : 60000093  r0 : 00000028
> [    4.475616] Flags: nzCv  IRQs off  FIQs on  Mode SVC_32  ISA ARM
> Segment user
> [    4.483245] Control: 10c53c7d  Table: adf8806a  DAC: 00000015
> [    4.489288] Process systemd (pid: 1, stack limit = 0xed896240)
> [    4.495452] Stack: (0xed897c60 to 0xed898000)
> [    4.500030] 7c60: ed8953c0 c060b3c8 c0f50058 ed8958a8 c13daddc c009097c
> ed896000 c0c6f3b0
> [    4.508666] 7c80: ed895890 00000005 c0e91adc ed8953c0 c0e5c16c c0091f00
> c0f54018 00000000
> [    4.517303] 7ca0: 0000003d c0091384 c0e91adc ed8958a8 ed896000 00000004
> c007c4e7 26f13609
> [    4.525939] 7cc0: 00000001 00000000 c0f54128 00000000 00000001 00000000
> ed896000 00000028
> [    4.534545] 7ce0: 00000000 00000000 00000000 00000000 c013157c c00930a4
> 00000002 00000000
> [    4.543182] 7d00: 00000000 c013157c 00000000 c00938a4 60000013 c00938a4
> 00000000 00000018
> [    4.551818] 7d20: c013157c 00000018 c0c9624c ede79880 ed249f3c 00000100
> c0e4ac04 c05fcfcc
> [    4.560455] 7d40: 00000002 00000000 c013157c 000080d0 000080d0 ede79880
> 00000010 c013157c
> [    4.569091] 7d60: 00000100 ede79880 ed24ab88 c0c9624c ed249ee8 c0c964cc
> c0c964cc c02959a8
> [    4.577728] 7d80: 00000000 ec819640 ed24ab88 ec81964c ed249ee8 c0295dd4
> ed24abe0 ed249ee8
> [    4.586364] 7da0: ed24abe0 00020001 ed249ee8 ed24ab88 00008000 00000001
> ed816018 ed249ee8
> [    4.595001] 7dc0: 00000000 c02935a8 00000000 c00a3f18 ed816018 edf66ac0
> ed249d98 c00a4fcc
> [    4.603637] 7de0: 00000000 00000000 ed897e4c 61749978 00736b73 00000000
> 00000000 00000000
> [    4.612274] 7e00: 00000000 00000000 00000000 00000000 00000000 00000000
> 00000000 00000000
> [    4.620910] 7e20: 00000000 00000000 00000000 00000000 00000000 00000000
> 00000000 00000000
> [    4.629547] 7e40: 00000000 00000000 00000000 00000000 000000d0 00000001
> ed816018 ed816018
> [    4.638183] 7e60: edf7c000 ed816000 c13a5a24 ed24ae28 00000000 c00a5780
> 00000080 00000000
> [    4.646820] 7e80: 00000001 ed816018 ed97c7c0 edf7c000 ed816000 c00a5d0c
> ed897eac c00dc97c
> [    4.655456] 7ea0: 00000001 ed897ea4 ed897ea4 00000000 00000002 00000000
> 00000000 edff65c0
> [    4.664093] 7ec0: 00000001 ed816000 00000000 edf38000 edff68c0 c0e4afbc
> c0e4afbc 00000000
> [    4.672729] 7ee0: edf39000 c0113d34 00000000 c012b7d4 edcc5600 edff68c0
> 00000000 c0e4afbc
> [    4.681365] 7f00: edf38000 00000000 00000027 c012bc90 c0e4afbc edf38000
> edff68c0 edff6980
> [    4.690002] 7f20: c0e480c4 c012db14 edf38000 c0092ea4 00095c3b edf38000
> edcc5790 ed249e40
> [    4.698638] 7f40: 00000000 ed897f8c 00001000 c012d8c8 edff68c0 00000000
> ed8f5000 00094c1c
> [    4.707275] 7f60: 0000000e c0013928 ed896000 00000000 bedcdef4 c012e310
> edf38000 c0093a4c
> [    4.715911] 7f80: 0000000e edff6980 edff68c0 edf38000 00000015 00094c3c
> 00000001 00094938
> [    4.724548] 7fa0: 00000015 c0013780 00094c3c 00000001 00094c1c 00093990
> 00094c1c 0000000e
> [    4.733184] 7fc0: 00094c3c 00000001 00094938 00000015 00094954 00093990
> bedcda60 bedcdef4
> [    4.741821] 7fe0: 000c5d3c bedcd928 00040745 b6e049f0 600f0010 00094c1c
> 00800000 01010010
> [    4.750457] [<c0091148>] (__lock_acquire+0x58/0x1a9c) from [<c00930a4>]
> (lock_acquire+0x9c/0x128)
> [    4.759857] [<c00930a4>] (lock_acquire+0x9c/0x128) from [<c05fcfcc>]
> (_raw_spin_lock+0x34/0x44)
> [    4.769012] [<c05fcfcc>] (_raw_spin_lock+0x34/0x44) from [<c013157c>]
> (simple_xattr_get+0x20/0x90)
> [    4.778472] [<c013157c>] (simple_xattr_get+0x20/0x90) from [<c02959a8>]
> (smk_fetch+0x58/0x90)
> [    4.787475] [<c02959a8>] (smk_fetch+0x58/0x90) from [<c0295dd4>]
> (smack_d_instantiate+0xec/0x284)
> [    4.796844] [<c0295dd4>] (smack_d_instantiate+0xec/0x284) from
> [<c02935a8>] (security_d_instantiate+0x1c/0x34)
> [    4.807403] [<c02935a8>] (security_d_instantiate+0x1c/0x34) from
> [<c00a3f18>] (cgroup_create_file.part.17+0x40/0x108)
> [    4.818603] [<c00a3f18>] (cgroup_create_file.part.17+0x40/0x108) from
> [<c00a4fcc>] (cgroup_addrm_files+0x158/0x2e0)
> [    4.829620] [<c00a4fcc>] (cgroup_addrm_files+0x158/0x2e0) from
> [<c00a5780>] (cgroup_populate_dir+0x110/0x120)
> [    4.840087] [<c00a5780>] (cgroup_populate_dir+0x110/0x120) from
> [<c00a5d0c>] (cgroup_mount+0x3f8/0x48c)
> [    4.850006] [<c00a5d0c>] (cgroup_mount+0x3f8/0x48c) from [<c0113d34>]
> (mount_fs+0x44/0x184)
> [    4.858825] [<c0113d34>] (mount_fs+0x44/0x184) from [<c012bc90>]
> (vfs_kern_mount+0x4c/0xc0)
> [    4.867645] [<c012bc90>] (vfs_kern_mount+0x4c/0xc0) from [<c012db14>]
> (do_mount+0x198/0x910)
> [    4.876556] [<c012db14>] (do_mount+0x198/0x910) from [<c012e310>]
> (sys_mount+0x84/0xb8)
> [    4.885009] [<c012e310>] (sys_mount+0x84/0xb8) from [<c0013780>]
> (ret_fast_syscall+0x0/0x3c)
> [    4.893920] Code: e59f6eac e5961000 e3510000 0a000030 (e595c000)
> [    4.900360] ---[ end trace d838e039c440e58e ]---
> [    4.905242] note: systemd[1] exited with preempt_count 1
> [    4.911437] Kernel panic - not syncing: Attempted to kill init!
> exitcode=0x0000000b
> [    4.911437]
> [    4.921112] CPU0: stopping
> [    4.923980] [<c001b4a8>] (unwind_backtrace+0x0/0xf0) from [<c00193e8>]
> (handle_IPI+0x140/0x16c)
> [    4.933135] [<c00193e8>] (handle_IPI+0x140/0x16c) from [<c000852c>]
> (gic_handle_irq+0x54/0x5c)
> [    4.942230] [<c000852c>] (gic_handle_irq+0x54/0x5c) from [<c05fdc64>]
> (__irq_svc+0x44/0x7c)
> [    4.951019] Exception stack(0xc0dc1f58 to 0xc0dc1fa0)
> [    4.956359] 1f40:
> c00148f8 00000000
> [    4.964965] 1f60: 0000fc0c c0031e28 c0dc0000 c0dc0000 c0e8f048 c0609c20
> c0dc0000 00000000
> [    4.973602] 1f80: c0dcd010 00000000 60000113 c0dc1fa0 c00148f8 c00148fc
> 60000113 ffffffff
> [    4.982238] [<c05fdc64>] (__irq_svc+0x44/0x7c) from [<c00148fc>]
> (default_idle+0x20/0x3c)
> [    4.990844] [<c00148fc>] (default_idle+0x20/0x3c) from [<c0014a80>]
> (cpu_idle+0x54/0x10c)
> [    4.999481] [<c0014a80>] (cpu_idle+0x54/0x10c) from [<c0d617c0>]
> (start_kernel+0x2b4/0x304)
> [    5.008300] drm_kms_helper: panic occurred, switching back to text
> console
>
>   Regards
>
> Kishore M.R
>
>
>
> 2014-04-08 20:54 GMT+05:30 Schaufler, Casey <[email protected]>:
>
>  Please try:
>
>
>
> # ls -lZ /lib/firmware
>
> And
>
>
>
> # chsmack /lib/firmware/*
>
>
>
> These should report that the Smack label is "_". If they report "System"
> or "User" use
>
>
>
> # chsmack -a "_" *pathname*
>
> to set it.
>
>
>
> *From:* Clark, Joel
> *Sent:* Tuesday, April 08, 2014 1:06 AM
> *To:* Kishore Sheik Ahamed; [email protected]
> *Cc:* Schaufler, Casey
> *Subject:* RE: Firmware will not load from filesystem during boot
>
>
>
> Access control is via SMACK. The firmware modules must have a floor SMACK
> label to be loaded.
>
> For more information please see
> https://wiki.tizen.org/wiki/Security:SmackThreeDomainModel
>
> And https://wiki.tizen.org/wiki/Security
>
>
>
> Regards
>
> Joel
>
>
>
>
>
> *From:* [email protected] 
> [mailto:[email protected]<[email protected]>]
> *On Behalf Of *Kishore Sheik Ahamed
> *Sent:* Monday, April 07, 2014 12:23 AM
> *To:* [email protected]
> *Subject:* Firmware will not load from filesystem during boot
>
>
>
> Hi
>
> I have a tizen 3.0 ivi armv7hl build which boots to console.
>
> Some of the kernel drivers try to load firmwares for peripherals from*
> /lib/firmware* during boot from the file system.
>
> This action fails as there is no access to those files in the location.
>
> On building the kernel binary image with those firmwares works perfect.
>
> Is there any file system restriction or any  kernel feature to be enabled
> for file system access in tizen 3.0?
>
>
>
>
> PS:This works as intended on the older tizen 2.2. builds.
>
>
>
> Regards
>
> Kishore M.R
>
>
>
>
>
>
>
>
>
_______________________________________________
IVI mailing list
[email protected]
https://lists.tizen.org/listinfo/ivi

Reply via email to