Contrary to what many people have suggested, both the vanilla and the fixed SuSE 7.2 kernels do have quotas enabled. You can verify this by typing gunzip -c /proc/config.gz | grep -i quota HOWEVER, I have been unable to get quotas to work, and this problem was reported by another user on the suse-linux-e list (see http://lists2.suse.com/archive/suse-linux-e/2001-Jul/1934.html ) Also when I tried it quotas were not supported on reiserfs. I haven't repeated my tests with the new kernel. I think your best bet is to ignore all the advice about building kernels and re-ask the question on suse-linux-e. Bob On Thu, 15 Nov 2001, Eric Romang wrote:
Hello,
Thxs for your answers :) But I think, this is security related ... You receive an email from SuSE talking about kernel security hole, and with all the instruction to install an new kernel RPM ...
When I have install my RPM kernel on my SuSE 7.2, the quota support and IPV6, and Tunneling was inside the kernel ... But when I do this update, SuSE say's nothing about consequence ..., I loose all my configuration, and also security configuration ... This is a security hole on how SuSE has communicate about this kernel update... This is a security hole on system where was good configured, but today not more...
But, thxs for your help. Just one other question, can I downgrade my kernel with the 2.4.4-4 and that all my modules will be on more time OK, or should install a complete server... think on the end user how receive a email with a security advisory every time... Linux gonna loose his customers if he don't care about all the dependencies of a system, and also don^'t explain correctly all the consequence on all the end users...
Regards.
Eric
-----Original Message----- From: Erwin Zierler - stubainet.at [mailto:erwin.zierler@stubainet.at] Sent: 15 November 2001 07:44 To: suse-security@suse.com Subject: Re: FW: [suse-security] Re: SuSE Security Announcement: kernel (update) (SuSE-SA:2001:039)
Ok, this is really the last answer to this thread - I promise ;-)
Let me first answer your question: you cannot 'modify' the options of a kernel - all you can do is load/unload modules. If a feature is not available as a module (such as quota support) you are stuck and all you can du is build your own kernel. Period.
Please understand that there is a difference between a "kernel" and the "kernel source". A kernel that was compiled by SuSE or any other distributer and packed into a kernel RPM usually contains just that: the kernel and modules. It is designed to boot just about any hardware. quota support is NOT compiled by default afaik so if you need it (or any other feature which cannot be loaded as a module) you are out of luck with the kernel RPM. Now you need to build your own kernel (see my original answer on how to do this) and during the configuration process you need to make sure to include all the features you need.
Again: kernel RPM =! kernel source RPM
Read up on the topic and please stop posting about this here since it really isn't security related - thanks :-)
Erwin
--- Eric Romang wrote:
Hello,
Yes what is the way to modify the options of the RPM Kernel 2.4.7, without to install a new one ?
Eric
-----Original Message----- From: test@cyclops.eahd.or.ug [mailto:test@cyclops.eahd.or.ug] Sent: 13 November 2001 16:41 To: Erwin Zierler - stubainet.at Cc: suse-security@suse.com Subject: Re: FW: [suse-security] Re: SuSE Security Announcement: kernel (update) (SuSE-SA:2001:039)
maybe i am missing something here but i have nothing like /usr/src/linux Kenneth
On Mon, 12 Nov 2001, Erwin Zierler - stubainet.at wrote:
Eric Romang wrote:
Nobody has answer ?
Well, seems you have to recompile a kernel with quota support. I am pretty sure that this list is NOT the right place to ask about help with kernel compilation problems though.
To get you started though, consider these steps:
1. install the kernel sources (you have done that) 2. cd /usr/src/linux 3. su - 4. make config (i.e. make menuconfig, make xconfig) 5. go through all the options and select what you need (help is there) 6. make dep; make bzlilo; make modules; make modules_install 7. check /etc/lilo.conf to make usre you can access and boot your old kernel in case you messed up the new one 8. reboot and see if the new kernel works as expected
Make sure you compile things that are needed for booting are compiled into the kernel and not loaded as modules (i.e. root fs on reiserfs, low level scsi driver, etc.)
Hope this gets you started.
Erwin
---
>-----Original Message----- >From: Eric Romang [mailto:eric.romang@synapse.lu] >Sent: 09 November 2001 16:16 >To: suse-security@suse.com >Subject: RE: [suse-security] Re: SuSE Security Announcement: kernel >(update) (SuSE-SA:2001:039) > > >Hello, > >I have installed the new kernel as in >the SuSE directive. But yet all my users >quota are away ... How can I recompile the kernel >to have quota activated ? > >Thanks for your help. > >Eric > > > [.....]
-- Erwin Zierler | web- / host- / postmaster - stubainet.at | erwin.zierler@stubainet.at / webmaster@stubainet.at | Tel.: 0 5225 - 64325 Fax 99 Mobil: 0664 - 130 67 91
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
-- Erwin Zierler | web- / host- / postmaster - stubainet.at | erwin.zierler@stubainet.at / webmaster@stubainet.at | Tel.: 0 5225 - 64325 Fax 99 Mobil: 0664 - 130 67 91
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
============================================================== Bob Vickers R.Vickers@cs.rhul.ac.uk Dept of Computer Science, Royal Holloway, University of London WWW: http://www.cs.rhul.ac.uk/home/bobv Phone: +44 1784 443691