Re: [gentoo-hardened] problems with bittorrent and bittornado

> > Used strace and it seems that PaX is the culpit, could somebody confirm
> > this?
>
> Your understanding of the problem seems backwards. python is probably
> the culpit and PaX is only making it obvious that something else has a
> fundamental code flaw.
> (It bugs me when I see people blame pax & grsec for faulty software)

ok, after having looked at the strace, i see a few things only:

1. there's a sign of ld.so:make_stack_executable() failing, apparently
   because /usr/lib/libcrypto.so.0.9.7 is marked with an executable
   PT_GNU_STACK. i think that's a known false positive (PT_PAX_FLAGS
   doesn't have emutramp enabled here).

2. there's only one mmap request that creates (well, tries to ;-) a
   writable/executable mapping and that's right after mapping psyco.so.
   based on the package description ("[it] can massively speed up the
   execution of any Python code") i bet it does exactly that by generating
   code at runtime (the website confirms that it does JIT compilation),
   hence it will not work with non-executable pages. since this is a
   library you have to disable MPROTECT on the executable that uses it,
   in this case python.

PS: rumen, i think you don't need to bother with those extra logs and
    straces i asked for in the previous mail, just disable MPROTECT
    on python and be done with it (i've tested it here).


--
gentoo-hardened@g.o mailing list