[expert] compiling kernel modules

2000-07-07 Thread Daniel Woods


3 important questions are preceeded with ***

I have had the need to learn how to build a new kernel
(ok, not so bad at all) for using VPN masq, to allow
LAN client access to work VPN.  I grabbed the 2.2.15
patch for VPN, and had 3 error hunks after the patch.
Ok, no problem since they were easy to add into the code.
I then did the following steps...

cd /usr/linux  # linked to linux2.2.16-9mdk
make clean
make menuconfig
# turned on ip_masq_ipsec option as a module
make dep
make bzImage   # took 15 minutes
# copied to /boot/vm-vpn and modified Grub's menu.lst

So now I wanted to be able to compile only the required
modules for ip_masq_ipsec.  *** How do I do that ?
I ran 'make modules' which took 45 minutes, and then
ran 'make modules install'.  Is there not a way to just
compile the modules I want and then manually copy them
into /lib/modules/* ?  I checked the Makefiles but could
not see any such option.

*** Another thing, how to compile a *secure* kernel version ?
Looking at /usr/linux/Makefile
VERSION = 2
PATCHLEVEL = 2
SUBLEVEL = 16
EXTRAVERSION = -9mdk
So how this is not the -9mdksecure version.  How upgraded
from 2.2.15mdk to 2.2.16mdk-secure via MandrakeUpdate but
I don't know if the actual source is the secure version.
What are the differences.

*** When a kernel is running, how can you tell if it is a
secure kernel version ?

Thanks... Dan.




Re: [expert] compiling kernel modules

2000-07-07 Thread Daniel Woods


 *** Another thing, how to compile a *secure* kernel version ?
 Looking at /usr/linux/Makefile
 VERSION = 2
 PATCHLEVEL = 2
 SUBLEVEL = 16
 EXTRAVERSION = -9mdk
 So how this is not the -9mdksecure version.  How upgraded
 from 2.2.15mdk to 2.2.16mdk-secure via MandrakeUpdate but
 I don't know if the actual source is the secure version.
 What are the differences.

I just found "Secure-Linux Patch 2.2.16 version 1" posted
today at http://freshmeat.net/news/2000/07/07/962992843.html
The patch authors are at http://www.openwall.com/linux/
Is this what makes it secure, or is this unrelated to
my original question ?

Thanks... Dan.





Re: [expert] compiling kernel modules

2000-07-07 Thread Anton Graham

Submitted 07-Jul-00 by Daniel Woods:
 So now I wanted to be able to compile only the required
 modules for ip_masq_ipsec.  *** How do I do that ?
 I ran 'make modules' which took 45 minutes, and then
 ran 'make modules install'.  Is there not a way to just
 compile the modules I want and then manually copy them
 into /lib/modules/* ?  I checked the Makefiles but could
 not see any such option.

This is handled during the "make menuconfig" stage.  In there you
decide which modules get compiled and installed.

 *** Another thing, how to compile a *secure* kernel version ?
 Looking at /usr/linux/Makefile
 VERSION = 2
 PATCHLEVEL = 2
 SUBLEVEL = 16
 EXTRAVERSION = -9mdk
 So how this is not the -9mdksecure version.  How upgraded
 from 2.2.15mdk to 2.2.16mdk-secure via MandrakeUpdate but
 I don't know if the actual source is the secure version.
 What are the differences.

Okay, this is not as complicated as you're making it.  The *same*
sources are used for mdk, mdksmp, mdkfb, and mdksecure kernels.  The
difference in in the .config file.  What you should find is that in
/usr/doc/kernel-$(uname -r) is a config file that you can import into
your make menuconfig session to give you the base selections for the
secure kernel

 
 *** When a kernel is running, how can you tell if it is a
 secure kernel version ?

Only by the kernel's name.  There is no mystical flag that says "Hi,
I'm secure!", so the kernel gets named secure so that you can tell.
uname -r will give you your current kernel version (2.2.16-3.2 in my
case)

HTH

-- 
   _
 _|_|_
  ( )   *Anton Graham
  /v\  / [EMAIL PROTECTED]
/(   )X
 (m_m)   GPG ID: 18F78541
Penguin Powered!