Re: [owl-users] cisco vpnclient

From: Solar Designer (solar@private)
Date: Fri Feb 17 2006 - 12:41:32 PST


On Fri, Feb 17, 2006 at 08:31:37PM +0100, Bernhard Fischer wrote:
> That is the relevant part from the driver_build.sh script:
> #########snip###########
> INCLUDES="-I. -I${KSRCDIR}/include"
> CFLAGS="-O2 -DCNI_LINUX_INTERFACE -D__KERNEL__ -DMODULE
> -D_LOOSE_KERNEL_NAMES -DHAVE_CONFIG_H"

Note the lack of -DMODVERSIONS here.  Also, if your kernel is built for
SMP, there must be -D__SMP__ here.

> rpm!root:~/vpnclient# ./driver_build.sh /usr/src/linux

FWIW, it is not a good idea to be compiling stuff as root.  We've got
pseudo-user "sources" for compiling the kernel and kernel modules.

> rpm!root:~/vpnclient# insmod ./cisco_ipsec
> ./cisco_ipsec: ./cisco_ipsec: unresolved symbol eth_type_trans
> ./cisco_ipsec: ./cisco_ipsec: unresolved symbol __kfree_skb
> ./cisco_ipsec: ./cisco_ipsec: unresolved symbol alloc_skb
> ./cisco_ipsec: ./cisco_ipsec: unresolved symbol htons
> ./cisco_ipsec: ./cisco_ipsec: unresolved symbol skb_under_panic
> ./cisco_ipsec: ./cisco_ipsec: unresolved symbol kmalloc
[...]

So it fails to find even the most essential symbols.  My guess is that
you have the kernel built with CONFIG_MODVERSIONS, but you are not
building the module in the same way.  You need to either rebuild the
kernel without modversions or build the module with modversions as well.

-- 
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598  fp: 6429 0D7E F130 C13E C929  6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments

Was I helpful?  Please give your feedback here: http://rate.affero.net/solar



This archive was generated by hypermail 2.1.3 : Fri Feb 17 2006 - 12:43:51 PST