| 1 |
I am trying to migrate from uclibc to uclibc-ng. |
| 2 |
|
| 3 |
First, I found 2 typos in the wiki at |
| 4 |
https://wiki.gentoo.org/wiki/Project:Hardened_uClibc#Migration_to_uClibc-ng |
| 5 |
|
| 6 |
cp -a /var/tmp/portage/sys-libs/uclibc-ng/image/lib /lib.new should be |
| 7 |
cp -a /var/tmp/portage/sys-libs/uclibc-ng-1.0.17/image/lib /lib.new |
| 8 |
|
| 9 |
ls -al /lib/ld-uClibc.so.0 should be |
| 10 |
ls -al /lib/ld*-uClibc.so.0 to take in account 64-bit systems |
| 11 |
|
| 12 |
|
| 13 |
But now, I have several PAX errors, cannot start X or use GNU |
| 14 |
coreutils (that static busybox comes handy),as you can see below: |
| 15 |
|
| 16 |
This is pedro.O (Linux x86_64 4.4.8-hardened-r1) 21:57:56 |
| 17 |
|
| 18 |
pedro login: drener |
| 19 |
[19640.729329] grsec: denied marking stack executable as requested by |
| 20 |
PT_GNU_STACK |
| 21 |
marking in /lib/libuClibc-0.1.0.19.so by /bin/login[login:13309] uid/euid:0/0 |
| 22 |
gid/egid:0/0, parent /ginit[init:1] uid/euid:0/0 gid/egid:0/0 |
| 23 |
Password: |
| 24 |
[19643.202924] grsec: denied marking stack executable as requested by |
| 25 |
PT_GNU_STACK |
| 26 |
marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/id[id:13310] |
| 27 |
uid/euid:1000/1000 |
| 28 |
gid/egid:1000/1000, parent /ginit[ash:13309] uid/euid:1000/1000 |
| 29 |
gid/egid:1000/1000 |
| 30 |
[19643.215949] grsec: denied marking stack executable as requested by |
| 31 |
PT_GNU_STACK |
| 32 |
marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/id[id:13317] |
| 33 |
uid/euid:1000/1000 |
| 34 |
gid/egid:1000/1000, parent /ginit[ash:13309] uid/euid:1000/1000 |
| 35 |
gid/egid:1000/1000 |
| 36 |
[19643.220535] grsec: denied marking stack executable as requested by |
| 37 |
PT_GNU_STACK |
| 38 |
marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/dircolors[dircolors:13318] |
| 39 |
uid/euid:1000/1000 gid/egid:1000/1000, parent /ginit[ash:13309] |
| 40 |
uid/euid:1000/1000 |
| 41 |
gid/egid:1000/1000 |
| 42 |
[19643.227779] grsec: denied marking stack executable as requested by |
| 43 |
PT_GNU_STACK |
| 44 |
marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/dircolors[dircolors:13319] |
| 45 |
uid/euid:1000/1000 gid/egid:1000/1000, parent /ginit[ash:13309] |
| 46 |
uid/euid:1000/1000 |
| 47 |
gid/egid:1000/1000 |
| 48 |
-ash: /home/drener/.bashrc: line 72: syntax error: bad function name |
| 49 |
|
| 50 |
drener@×.pedro 2 ~ |
| 51 |
$ startx |
| 52 |
[19645.530064] grsec: denied marking stack executable as requested by |
| 53 |
PT_GNU_STACK |
| 54 |
marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/startx[startx:13320] |
| 55 |
uid/euid:1000/1000 gid/egid:1000/1000, parent /ginit[ash:13309] |
| 56 |
uid/euid:1000/1000 |
| 57 |
gid/egid:1000/1000 |
| 58 |
|
| 59 |
/bin/dash: symbol 'sigsetmask': can't resolve symbol |
| 60 |
|
| 61 |
drener@×.pedro 255 ~ |
| 62 |
$ |
| 63 |
|
| 64 |
I used the configuration file at |
| 65 |
https://gitweb.gentoo.org/proj/releng.git/tree/tools-uclibc/portage.amd64.hardened/savedconfig/sys-libs/uclibc-ng |
| 66 |
. And my kernel is configured to obey PaX flags from XATTR only. What |
| 67 |
is going on here? |
| 68 |
|
| 69 |
-- |
| 70 |
René Rhéaume |
Archives