[Openswan Users] 2.2.x Requires LKM Support?

[Michael Richardson]

-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Paul" == Paul Wouters <paul at xelerance.com> writes:
    Paul> On Tue, 5 Oct 2004, Bryan McAninch wrote:

    >> I've just upgraded OpenSWAN from 2.1.5 to 2.2.0, kernel 2.4.27.
    >> I encountered an error during kernel (re)compilation -
    >> "modversion.h not found" in ipsec_alg.c. This was remedied by
    >> adding LKM support - but, for security reasons, I prefer not to
    >> have LKM support on VPN / firewall devices. I had no issues with

  You are my kind of man.
  I wish that I could force some of the distro maintainers to live
without modules for a week.

    >> lack of LKM support in the 2.1.5 release, so I'm wondering, will
    >> this be a permanent thing in 2.2.x or is this just a temporary
    >> compilation bug?

    Paul> This is a temporary problem. It's on Michael's todo list.  I
    Paul> am not sure if just removing the include file fixes
    Paul> this. Michael?

  In your case, just remove the #include line.
  In general, for module builds we include modversions.h on the command
line,  but algorithm code itself wants to link to modules, so it gets 
complicated.
  (You could have a statically linked KLIPS that loads dynamic algorithms)

  Please report a compilation bug -- we should create a build test case
that builds a kernel without LKM enabled at all.

- --
]     "Elmo went to the wrong fundraiser" - The Simpson         |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr at xelerance.com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBQWVZm4qHRg3pndX9AQGrZQQAvUQQns3JYovY70zsxv9LdlM4iVjDKE84
5kFH5BWfiHv3PBxLiGCzU104IEnJgeCmGUOsaGzC6+/vRjkF8BJ6j2kmUlSOuM17
ZN7YewCImO+BccES52qpykkLYWmQoSpkVJvRfjwc+4UXlUkBs2XYzvE2o67ZXZ1f
VKie6BIUAqo=
=J75E
-----END PGP SIGNATURE-----