1 |
commit: 07380791d1f4739ba21be6bcc986b575c6fb8b27 |
2 |
Author: Robin H. Johnson <robbat2 <AT> gentoo <DOT> org> |
3 |
AuthorDate: Thu Nov 30 20:33:14 2017 +0000 |
4 |
Commit: Robin H. Johnson <robbat2 <AT> gentoo <DOT> org> |
5 |
CommitDate: Thu Nov 30 20:35:50 2017 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=07380791 |
7 |
|
8 |
net-firewall/ipset: block modules & CONFIG_PAX_CONSTIFY_PLUGIN |
9 |
|
10 |
Closes: https://bugs.gentoo.org/614896 |
11 |
Package-Manager: Portage-2.3.16, Repoman-2.3.6 |
12 |
Signed-off-by: Robin H. Johnson <robbat2 <AT> gentoo.org> |
13 |
|
14 |
net-firewall/ipset/ipset-6.34.ebuild | 2 ++ |
15 |
1 file changed, 2 insertions(+) |
16 |
|
17 |
diff --git a/net-firewall/ipset/ipset-6.34.ebuild b/net-firewall/ipset/ipset-6.34.ebuild |
18 |
index 292b40eb05d..98a8e3e335b 100644 |
19 |
--- a/net-firewall/ipset/ipset-6.34.ebuild |
20 |
+++ b/net-firewall/ipset/ipset-6.34.ebuild |
21 |
@@ -36,6 +36,8 @@ pkg_setup() { |
22 |
# It does still build without NET_NS, but it may be needed in future. |
23 |
#CONFIG_CHECK="${CONFIG_CHECK} NET_NS" |
24 |
#ERROR_NET_NS="ipset requires NET_NS (network namespace) support in your kernel." |
25 |
+ CONFIG_CHECK+=" !PAX_CONSTIFY_PLUGIN" |
26 |
+ ERROR_PAX_CONSTIFY_PLUGIN="ipset contains constified variables (#614896)" |
27 |
|
28 |
build_modules=0 |
29 |
if use modules; then |