Subject: Re: Strange Veriexec kernel breakage
To: None <current-users@netbsd.org>
From: Scott Ellis <scotte@warped.com>
List: current-users
Date: 12/26/2006 10:56:54
This is a multi-part message in MIME format.
--------------000807060706050207080002
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Looks like the dmesg got cut off (oh well, most of the yuck is there), 
and the Kernel config attachment didn't make it through.  So, here's the 
kernel config!

--------------000807060706050207080002
Content-Type: text/plain;
 name="INTREPID.AMD64"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename="INTREPID.AMD64"

# Intrepid.warped.com
# ScottE 
#
# 09/12/04 - Initial version
# 11/19/04 - Removed ppbus, added COMPAT_BSDPTY, hard-coded root/dump
# 09/30/05 - Added ptyfs, tmpfs, ufsdirhash, vndcompresse.  
#	     Removed nfsserver, sequencer, firewire, compat netbsd32
# 02/25/06 - Added ucycom, removed count from vnd and bpfilter
#            Added amdpm (experimental), added UDF
# 02/26/06 - Removed amdpm (not for K8VSE)
#            Removed ucycom (doesn't support 300 baud!)
#            Added uplcom
# 06/06/06 - Added Promise IDE controller (pdcide, pdcsata)
# 06/06/06 - Added "-O2 -march=k8" make options (GCC4 only, O3 causes a warning)
# 06/06/06 - Added RAIDFrame support, removed most commented items (not ppbus)
# 06/07/06 - Experiment with removing MPACPI_SCANPCI and PCI_INTR_FIXUP
# 06/07/06 - Removed pdcide, as only pdcsata is used
# 06/07/06 - Add LFS, remove twe and ld (Hardware RAID), add root on *
# 06/07/06 - Removed vlan support
# 06/08/06 - Changed RAIDFrame units to 2
# 07/09/06 - Removed MPACPI, adapted for FVDL ACPI changes on 7/3/06
# 07/09/06 - Removed LFS, commented out PRIOSCAN strategy, added lm0
# 07/12/06 - Removed UFS_DIRHASH due to comments about memory corruption
# 07/17/06 - Removed ulpt to prevent me from trying it! (Cause panic)
# 07/19/06 - Re-add UFS_DIRHASH, since it wasn't the culprit
# 08/06/06 - Added POWERNOW_K8
# 08/17/06 - Removed IPFilter, changed to PF
# 10/17/06 - Removed ACPI_SCANPCI, added PCI_INTR_FIXUP
# 11/13/06 - Added LFS
# 12/21/06 - Removed LFS (buggy), added PAX_ options
# 12/26/06 - Added Veriexec and Fileassoc (needed for PaX also)
#

include		"arch/amd64/conf/std.amd64"

makeoptions	COPTS="-O2 -march=k8"

maxusers	16		# estimated number of users

# Standard system options
options 	RTC_OFFSET=0	# hardware clock is this many mins. west of GMT
options 	NTP		# NTP phase/frequency locked loop

options 	KTRACE		# system call tracing via ktrace(1)
options 	SYSTRACE	# system call vetting via systrace(1)

options 	SYSVMSG		# System V-like message queues
options 	SYSVSEM		# System V-like semaphores
options 	SYSVSHM		# System V-like memory sharing
options 	P1003_1B_SEMAPHORE	# p1003.1b semaphore support

# Compatibility options
options         COMPAT_BSDPTY   # /dev/[pt]ty?? ptys.
options 	COMPAT_30

# File systems
file-system 	FFS		# UFS
file-system 	MFS		# memory file system
file-system 	LFS 		# log-structured file system
file-system 	CD9660		# ISO 9660 + Rock Ridge file system
file-system 	MSDOSFS		# MS-DOS file system
file-system 	PTYFS 		# /dev/pts/N support
file-system 	TMPFS 		# experimental - Efficient memory file-system
file-system 	UDF 		# experimental - OSTA UDF CD/DVD file-system


# File system options
options 	SOFTDEP		# FFS soft updates support.
options 	UFS_DIRHASH 	# UFS Large Directory Hashing - Experimental

# BufQ Strategy
#options 	BUFQ_PRIOCSCAN	# BufQ PRIOCSCAN

# Networking options
options 	GATEWAY		# packet forwarding
options 	INET		# IP + ICMP + TCP + UDP
options 	PFIL_HOOKS	# pfil(9) packet filter hooks

# Debus options
options 	DUMP_ON_PANIC=0 # Don't write a kernel dump on panic

# PowerNow! / Cool 'n Quiet support
options 	POWERNOW_K8

# Security options
options	 	PAX_MPROTECT=1
options 	PAX_SEGVGUARD=0
options 	FILEASSOC 	# fileassoc(9) - required for Veriexec
#options 	VERIFIED_EXEC_FP_SHA256

# Kernel root file system and dump configuration.
config		netbsd	root on ? type ?

#
# Device configuration
#

mainbus0 at root

cpu* 		at mainbus?
ioapic* 	at mainbus? apid ?

# Basic Bus Support

# Advanced Control and Power Interface
acpi0 		at mainbus0
options		PCI_INTR_FIXUP

# ACPI devices
acpibut*       at acpi?                # ACPI Button
acpitz*        at acpi?                # ACPI Thermal Zone

# Mainboard devices
com* 		at acpi?		# Serial communications interface
fdc* 		at acpi?		# Floppy disk controller
lpt*           at acpi?                # Parallel port

# On-hold for debug
#atppc* 		at acpi?		# PPBus Parallel port

# On-hold for debug
# PPBUS Devices
#ppbus*		at atppc?
#lpt* 		at ppbus?

# PCI bus support
pci*	at mainbus? bus ?
pci*	at ppb? bus ?

# PCI bridges
pchb*	at pci? dev ? function ?	# PCI-Host bridges
pcib*	at pci? dev ? function ?	# PCI-ISA bridges
ppb*	at pci? dev ? function ?	# PCI-PCI bridges

# ISA bus support
isa0	at pcib?

pcppi0 		at isa?
sysbeep0 	at pcppi?

# Hardware monitors
# LM7[89] and compatible hardware monitors
lm0    at isa? port 0x290              # other common ports: 0x280, 0x310


# SCSI Controllers and Devices
# SCSI bus support
scsibus* at scsi?

# SCSI devices
sd*	at scsibus? target ? lun ?	# SCSI disk drives
cd*	at scsibus? target ? lun ?	# SCSI CD-ROM drives

# IDE and related devices
viaide* 	at pci? dev ? function ?	# VIA/AMD/Nvidia IDE controllers
pdcsata* 	at pci? dev ? function ? 	# Promise SATA150 controllers

# ATA (IDE) bus support
atabus* at ata?

# IDE drives
wd*	at atabus? drive ? flags 0x0000

# ATAPI bus support
atapibus* at atapi?

# ATAPI devices
# flags have the same meaning as for IDE drives.
cd*	at atapibus? drive ? flags 0x0000	# ATAPI CD-ROM drives
sd*	at atapibus? drive ? flags 0x0000	# ATAPI disk drives

# Miscellaneous mass storage devices

# ISA floppy
fd*	at fdc? drive ?			# the drives themselves

# Network Interfaces
# PCI network interfaces
ex*	at pci? dev ? function ?	# 3Com 90x[BC]
skc*    at pci? dev ? function ?        # SysKonnect SK9821 Gigabit Ethernet
sk*     at skc?                         # SysKonnect SK9821 Gigabit Ethernet

# MII/PHY support
exphy*	at mii? phy ?			# 3Com internal PHYs
makphy* at mii? phy ?                   # Marvell Semiconductor 88E1000 PHYs

# PCI USB controllers
ehci*	at pci?	dev ? function ?	# Enhanced Host Controller
ohci*   at pci? dev ? function ?        # Open Host Controller
uhci*	at pci?	dev ? function ?	# Universal Host Controller (Intel)

# USB bus support
usb*	at ehci?
usb*	at uhci?

# USB Hubs
uhub*	at usb?
uhub*	at uhub? port ? configuration ? interface ?

# USB HID device
uhidev*	at uhub? port ? configuration ? interface ?

# USB Generic HID devices
uhid*	at uhidev? reportid ?

# USB serial adpater
uplcom* at uhub? port ? 	# I/O DATA USB-RSAQ2 serial adapter
ucom* 	at uplcom? portno ?

# USB Mass Storage
umass*	at uhub? port ? configuration ? interface ?
scsibus* at umass?
wd*	at umass?

# D-Link DSB-R100 USB radio
udsbr*	at uhub? port ?
radio*	at udsbr?

# USB Generic driver
ugen*	at uhub? port ?

# Audio Devices
# PCI audio devices
auvia*  at pci? dev ? function ?        # VIA VT82C686A integrated AC'97 Audio

# Audio support
audio*	at audiobus?

# Pseudo-Devices
# disk/mass storage pseudo-devices
pseudo-device 	raid 		2 	# RAIDframe disk driver
options 	RAID_AUTOCONFIG 	# auto-configuration of RAID components
pseudo-device	vnd			# disk-like interface to files
options 	VND_COMPRESSION 	# compressed vnd(4)


# network pseudo-devices
pseudo-device	bpfilter		# Berkeley packet filter
pseudo-device	loop			# network loopback
pseudo-device	pf			# PF packet filter
pseudo-device	pflog			# PF log if


# miscellaneous pseudo-devices
pseudo-device	pty			# pseudo-terminals
pseudo-device	rnd			# /dev/random and in-kernel generator
pseudo-device	clockctl		# user control of clock subsystem
pseudo-device   ksyms                   # /dev/ksyms

# a pseudo device needed for veriexec
#pseudo-device 	veriexec 	1

--------------000807060706050207080002--