Virtualbox on hardened gentoo

· by Artem Sidorenko · Read in about 1 min · (50 words)

I wanted to setup phpVirtualBox on my new Intel NUC, which is running gentoo-hardened. Unfortunately VirtualBox can’t run with couple of grsecurity/pax flags enabled in kernel. To get VirtualBox running you have to disable following kernel config flags:

  • CONFIG_PAX_KERNEXEC
  • CONFIG_PAX_RANDKSTACK
  • CONFIG_PAX_MEMORY_UDEREF
  • CONFIG_GRKERNSEC_HIDESYM

and to enable:

  • CONFIG_PAX_ELFRELOCS (if you have CONFIG_PAX_MPROTECT)