Gentoo Archives: gentoo-hardened

From: Hinnerk van Bruinehsen <h.v.bruinehsen@×××××××××.de>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] Paxmarkings on mail-client/thunderbird
Date: Wed, 16 May 2012 15:02:14
Message-Id: 4FB3BC2B.5030805@fu-berlin.de
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 Hi,
5
6 at the moment the thunderbird-ebuild in the tree does a "pax mark m"
7 on the binary.
8 At least for me thunderbird works fine if I just disable jit.
9
10 What would be the workflow for reporting that. Should I file a bugreport?
11
12 With kind regards
13
14 Hinnerk
15
16 PS: It follows a "proof of concept"-ebuild (just the diff) that works
17 for me:
18
19
20 - --- /usr/portage/mail-client/thunderbird/thunderbird-12.0.1.ebuild
21 2012-05-08 11:31:16.000000000 +0200
22 +++ thunderbird-12.0.1.ebuild 2012-05-16 16:34:26.111099366 +0200
23 @@ -33,7 +33,8 @@
24 KEYWORDS="~alpha ~amd64 ~arm ~ppc ~ppc64 ~x86 ~x86-fbsd ~amd64-linux
25 ~x86-linux"
26 SLOT="0"
27 LICENSE="|| ( MPL-1.1 GPL-2 LGPL-2.1 )"
28 - -IUSE="bindist gconf +crashreporter +crypt +ipc +lightning +minimal
29 mozdom +webm"
30 +IUSE="bindist gconf +crashreporter +crypt +ipc +lightning +minimal mozdom
31 +pax_kernel +webm"
32
33 PATCH="thunderbird-10.0-patches-0.1"
34 PATCHFF="firefox-12.0-patches-0.1"
35 @@ -174,6 +175,12 @@
36 mozconfig_use_enable lightning calendar
37 mozconfig_use_enable gconf
38
39 + if use pax_kernel; then
40 + mozconfig_annotate '' --disable-methodjit
41 + mozconfig_annotate '' --disable-tracejit
42 + fi
43 +
44 +
45 # Bug #72667
46 if use mozdom; then
47 MEXTENSIONS="${MEXTENSIONS},inspector"
48 @@ -281,7 +288,6 @@
49 -i "${ED}"/usr/share/applications/${PN}.desktop
50 fi
51
52 - - pax-mark m "${ED}"/${MOZILLA_FIVE_HOME}/thunderbird-bin
53
54 share_plugins_dir
55 -----BEGIN PGP SIGNATURE-----
56 Version: GnuPG v2.0.19 (GNU/Linux)
57 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
58
59 iQEcBAEBAgAGBQJPs7wqAAoJEJwwOFaNFkYcv3YH/RL+anFbid1yfjOOKcdt0+hz
60 ovGJ83rPmFS6HQLDZ986LQgmTBDsDcDfAyhdzv+SbYQZNTRe29yGi4h+Z30b87Id
61 tF5YdPWYF1jp53o5DTiBMFMl//xZQAD/ZUXOkQhHrect5ZCSW69wm9h8vG/SOQrO
62 vCZ15Oya1ae7OugoSg0vI0Q9tIj9YKlcEYwzQdXh5ZkQZDYI2kcf1vepaMav/EoQ
63 YSG7+fGoMIz97wrqWjsNcTW2MDJSbFGi62PUlRWhbB6SIlwStWL7hD4grWNnAJad
64 j6+FzpZ88ZXB8fRKJ4meudTIeY1XFUzCNoIk72vIuD4dDMH9s1p9hH96vBbZUX0=
65 =AonK
66 -----END PGP SIGNATURE-----

Replies

Subject Author
Re: [gentoo-hardened] Paxmarkings on mail-client/thunderbird PaX Team <pageexec@××××××××.hu>