| 1 |
I'm sorry but I did read the help, but as I've compiled the whole system with |
| 2 |
the pic and pie flags enabled I thought I wouldn't have any problems. |
| 3 |
|
| 4 |
chpax -pEmrxsv /usr/bin/resolveip |
| 5 |
|
| 6 |
----[ chpax 0.7 : Current flags for /usr/bin/resolveip (pEmrxs) ]---- |
| 7 |
|
| 8 |
* Paging based PAGE_EXEC : disabled |
| 9 |
* Trampolines : emulated |
| 10 |
* mprotect() : not restricted |
| 11 |
* mmap() base : not randomized |
| 12 |
* ET_EXEC base : not randomized |
| 13 |
* Segmentation based PAGE_EXEC : disabled |
| 14 |
|
| 15 |
resolveip |
| 16 |
resolveip: error while loading shared libraries: cannot make segment writable |
| 17 |
for relocation: Permission denied |
| 18 |
|
| 19 |
So nothing's changed. |
| 20 |
|
| 21 |
The same for gen_lex_hash. |
| 22 |
|
| 23 |
ldd gen_lex_hash |
| 24 |
libpthread.so.0 => /lib/libpthread.so.0 (0x20607000) |
| 25 |
libz.so.1 => /lib/libz.so.1 (0x20619000) |
| 26 |
libcrypt.so.1 => /lib/libcrypt.so.1 (0x2062e000) |
| 27 |
libnsl.so.1 => /lib/libnsl.so.1 (0x2065c000) |
| 28 |
libstdc++.so.5 => |
| 29 |
/usr/lib/gcc-lib/i686-pc-linux-gnu/3.3.4/libstdc++.so.5 (0x20672000) |
| 30 |
libm.so.6 => /lib/libm.so.6 (0x207bf000) |
| 31 |
libgcc_s.so.1 => |
| 32 |
/usr/lib/gcc-lib/i686-pc-linux-gnu/3.3.4/libgcc_s.so.1 (0x207e2000) |
| 33 |
libc.so.6 => /lib/libc.so.6 (0x207ee000) |
| 34 |
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x205ea000) |
| 35 |
|
| 36 |
|
| 37 |
On Sat, 11 Sep 2004, Ned Ludd wrote: |
| 38 |
|
| 39 |
> I assume your using PaX in your kernel. |
| 40 |
> |
| 41 |
> You probably enabled NOELFRELOCS in the kernel .config without |
| 42 |
> reading the config help. |
| 43 |
> |
| 44 |
> On Sat, 2004-09-11 at 21:18, Andrei Ivanov wrote: |
| 45 |
>> Hello, |
| 46 |
>> I'm having problems with mysql: |
| 47 |
>> |
| 48 |
>> resolveip: error while loading shared libraries: cannot make segment |
| 49 |
>> writable for relocation: Permission denied |
| 50 |
>> |
| 51 |
>> ldd `which resolveip` |
| 52 |
>> libstdc++.so.5 => |
| 53 |
>> /usr/lib/gcc-lib/i686-pc-linux-gnu/3.3.4/libstdc++.so.5 (0x23d21000) |
| 54 |
>> libgcc_s.so.1 => |
| 55 |
>> /usr/lib/gcc-lib/i686-pc-linux-gnu/3.3.4/libgcc_s.so.1 (0x23e6e000) |
| 56 |
>> libc.so.6 => /lib/libc.so.6 (0x23e81000) |
| 57 |
>> libpthread.so.0 => /lib/libpthread.so.0 (0x23f99000) |
| 58 |
>> libz.so.1 => /lib/libz.so.1 (0x23fab000) |
| 59 |
>> libcrypt.so.1 => /lib/libcrypt.so.1 (0x23fbf000) |
| 60 |
>> libnsl.so.1 => /lib/libnsl.so.1 (0x23fed000) |
| 61 |
>> libm.so.6 => /lib/libm.so.6 (0x24003000) |
| 62 |
>> /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x23d0a000) |
| 63 |
>> |
| 64 |
> |
| 65 |
>> ./gen_lex_hash > lex_hash.h |
| 66 |
>> ./gen_lex_hash: error while loading shared libraries: cannot make segment |
| 67 |
>> writable for relocation: Permission denied |
| 68 |
> |
| 69 |
> [snip crap] |
| 70 |
> |
| 71 |
>> What can I do? |
| 72 |
> |
| 73 |
> If the above is the case then disable the option or chpax/paxctl -m said |
| 74 |
> program. |
| 75 |
> |
| 76 |
> |
| 77 |
>> -- |
| 78 |
>> gentoo-hardened@g.o mailing list |
| 79 |
> -- |
| 80 |
> Ned Ludd <solar@g.o> |
| 81 |
> Gentoo (hardened,security,infrastructure,embedded,toolchain) Developer |
| 82 |
> |
| 83 |
|
| 84 |
|
| 85 |
-- |
| 86 |
gentoo-hardened@g.o mailing list |
Archives