| 1 |
On 12/11/16 10:11 PM, René Rhéaume wrote: |
| 2 |
> I am trying to migrate from uclibc to uclibc-ng. |
| 3 |
> |
| 4 |
> First, I found 2 typos in the wiki at |
| 5 |
> https://wiki.gentoo.org/wiki/Project:Hardened_uClibc#Migration_to_uClibc-ng |
| 6 |
> |
| 7 |
> cp -a /var/tmp/portage/sys-libs/uclibc-ng/image/lib /lib.new should be |
| 8 |
> cp -a /var/tmp/portage/sys-libs/uclibc-ng-1.0.17/image/lib /lib.new |
| 9 |
> |
| 10 |
> ls -al /lib/ld-uClibc.so.0 should be |
| 11 |
> ls -al /lib/ld*-uClibc.so.0 to take in account 64-bit systems |
| 12 |
> |
| 13 |
> |
| 14 |
> But now, I have several PAX errors, cannot start X or use GNU |
| 15 |
> coreutils (that static busybox comes handy),as you can see below: |
| 16 |
> |
| 17 |
> This is pedro.O (Linux x86_64 4.4.8-hardened-r1) 21:57:56 |
| 18 |
> |
| 19 |
> pedro login: drener |
| 20 |
> [19640.729329] grsec: denied marking stack executable as requested by |
| 21 |
> PT_GNU_STACK |
| 22 |
> marking in /lib/libuClibc-0.1.0.19.so by /bin/login[login:13309] uid/euid:0/0 |
| 23 |
> gid/egid:0/0, parent /ginit[init:1] uid/euid:0/0 gid/egid:0/0 |
| 24 |
> Password: |
| 25 |
> [19643.202924] grsec: denied marking stack executable as requested by |
| 26 |
> PT_GNU_STACK |
| 27 |
> marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/id[id:13310] |
| 28 |
> uid/euid:1000/1000 |
| 29 |
> gid/egid:1000/1000, parent /ginit[ash:13309] uid/euid:1000/1000 |
| 30 |
> gid/egid:1000/1000 |
| 31 |
> [19643.215949] grsec: denied marking stack executable as requested by |
| 32 |
> PT_GNU_STACK |
| 33 |
> marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/id[id:13317] |
| 34 |
> uid/euid:1000/1000 |
| 35 |
> gid/egid:1000/1000, parent /ginit[ash:13309] uid/euid:1000/1000 |
| 36 |
> gid/egid:1000/1000 |
| 37 |
> [19643.220535] grsec: denied marking stack executable as requested by |
| 38 |
> PT_GNU_STACK |
| 39 |
> marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/dircolors[dircolors:13318] |
| 40 |
> uid/euid:1000/1000 gid/egid:1000/1000, parent /ginit[ash:13309] |
| 41 |
> uid/euid:1000/1000 |
| 42 |
> gid/egid:1000/1000 |
| 43 |
> [19643.227779] grsec: denied marking stack executable as requested by |
| 44 |
> PT_GNU_STACK |
| 45 |
> marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/dircolors[dircolors:13319] |
| 46 |
> uid/euid:1000/1000 gid/egid:1000/1000, parent /ginit[ash:13309] |
| 47 |
> uid/euid:1000/1000 |
| 48 |
> gid/egid:1000/1000 |
| 49 |
> -ash: /home/drener/.bashrc: line 72: syntax error: bad function name |
| 50 |
> |
| 51 |
> drener@×.pedro 2 ~ |
| 52 |
> $ startx |
| 53 |
> [19645.530064] grsec: denied marking stack executable as requested by |
| 54 |
> PT_GNU_STACK |
| 55 |
> marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/startx[startx:13320] |
| 56 |
> uid/euid:1000/1000 gid/egid:1000/1000, parent /ginit[ash:13309] |
| 57 |
> uid/euid:1000/1000 |
| 58 |
> gid/egid:1000/1000 |
| 59 |
> |
| 60 |
> /bin/dash: symbol 'sigsetmask': can't resolve symbol |
| 61 |
> |
| 62 |
> drener@×.pedro 255 ~ |
| 63 |
> $ |
| 64 |
> |
| 65 |
> I used the configuration file at |
| 66 |
> https://gitweb.gentoo.org/proj/releng.git/tree/tools-uclibc/portage.amd64.hardened/savedconfig/sys-libs/uclibc-ng |
| 67 |
> . And my kernel is configured to obey PaX flags from XATTR only. What |
| 68 |
> is going on here? |
| 69 |
> |
| 70 |
|
| 71 |
It looks like a couple of things. |
| 72 |
|
| 73 |
First, can you run `readelf -l` on libuClibc-0.1.0.19.so and several |
| 74 |
binaries that fail. |
| 75 |
|
| 76 |
Second, dash seems broken for other reasons. You may try to rebuild it. |
| 77 |
uclibc-ng most certainly provides sigsetmask. |
| 78 |
|
| 79 |
-- |
| 80 |
Anthony G. Basile, Ph. D. |
| 81 |
Chair of Information Technology |
| 82 |
D'Youville College |
| 83 |
Buffalo, NY 14201 |
| 84 |
(716) 829-8197 |
Archives