Gentoo Archives: gentoo-hardened

From: Alex Efros <powerman@××××××××××××××××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] persistent paxctl -m?
Date: Thu, 09 Apr 2009 16:14:33
Message-Id: 20090409161411.GD2531@home.power
In Reply to: [gentoo-hardened] persistent paxctl -m? by Grant

On Thu, Apr 09, 2009 at 09:07:39AM -0700, Grant wrote:
> I seem to need to remember to paxctl -m the firefox binary whenever I > upgrade firefox. This inevitably leads to a browser crash and lost > time/info. Can I set up paxctl -m to persist, even if firefox is > upgraded?
Put this into your /etc/portage/bashrc: ---cut--- if [ "x${EBUILD_PHASE}" != "x" ]; then if [ -x "/etc/portage/bashrc.d/${CATEGORY}/${PF}.${EBUILD_PHASE}" ]; then source "/etc/portage/bashrc.d/${CATEGORY}/${PF}.${EBUILD_PHASE}" elif [ -x "/etc/portage/bashrc.d/${CATEGORY}/${P}.${EBUILD_PHASE}" ]; then source "/etc/portage/bashrc.d/${CATEGORY}/${P}.${EBUILD_PHASE}" elif [ -x "/etc/portage/bashrc.d/${CATEGORY}/${PN}.${EBUILD_PHASE}" ]; then source "/etc/portage/bashrc.d/${CATEGORY}/${PN}.${EBUILD_PHASE}" fi fi ---cut--- Next, create directory: mkdir -p /etc/portage/bashrc.d/www-client/ and create executable shell script in that dir: mozilla-firefox-bin.postinst ---cut--- #!/bin/bash ewarn "Running chpax -m /opt/firefox/firefox-bin to avoid crash on flash!" chpax -m /opt/firefox/firefox-bin ---cut--- -- WBR, Alex.


Subject Author
Re: [gentoo-hardened] persistent paxctl -m? Alex Efros <powerman@××××××××××××××××××.com>