Re: [gentoo-hardened] Running Skype on Hardened

[PaX Team]

On 30 Mar 2012 at 20:12,   wrote:

> On Thu, 29 Mar 2012, Sven Vermeulen wrote:
>
> >You can try to make it a valid ELF header first, and then paxmark it.
> >
> >I have the following for my Skype:
> >paxctl -C /opt/skype/skype
> >paxctl -me /opt/skype/skype
>
> I tried running paxctl -Cm on it (should be ran on install with pax_kernel USE
> flag), by it still reports an invalid ELF executable.

because it is an invalid ELF (it reports sections headers but it doesn't seem to
have any, or at least not where the ELF header says they should be). paxctl is not
the only one that complains, try readelf or eu-elflint for similar results.

as for the solution, you can try out the xattr control method that was written for
cases like this.