Re: [gentoo-hardened] X won't start.

[Alexander Gabert]

pageexec@××××××××.hu wrote:

>>Duplicate symbol __i686.get_pc_thunk.bx in /usr/X11R6/lib/modules/fo
>>p.a:bitmapmod.o
>>Also defined in /usr/X11R6/lib/modules/fonts/libbitmap.a
>>
>>The only way I have been able to fix it is to recompile gcc without the
>>hardened use flag and then recompile xfree. Does anyone have any idea
>>how I can run a hardened system and still use X?
>>
>>
>
>first of all, even if you can compile X with the elf loader (as in
>your case above) it would not work under PaX, you have to use a
>static server or the dlloader for that. latter is work in progress
>(or lots of manual work) so that leaves a static server for now, and
>if you need 3rd party binary drivers then you can't do even that, you
>have to disable PaX on your X server.
>
>second, the above error is the result of hardened gcc forcefully
>compiling the .o files of libbitmap.a with -fPIC and some problem
>in the elfloader that doesn't take into account that the symbol
>in question is marked as hidden and thus should not be visible
>outside of a .o file let alone generate duplicate symbol errors.
>
>
dear pipacs,
i talked to solar about this today and had the same assumption: the gcc 
is "spreading" something like that into the object files which does not 
belong there normally... but my assumption was a mere compiler error or 
sth.  your explanation makes even more sense than that.
Do you think the problem is with the new hardened gcc specs that 
automatically adds -fPIC if no -fPIC is found?
This flipflop logic may be the cause for the .a library getting misbuilt 
as PIC with the gcc internal preparation function showing up in the 
object files...

Thanks again,

Alex

>
>--
>gentoo-hardened@g.o mailing list
>
>
>


--
gentoo-hardened@g.o mailing list