Gentoo Archives: gentoo-hardened

From: "Tóth Attila" <atoth@××××××××××.hu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Python stops working after upgrade
Date: Sat, 01 Jun 2013 17:08:06
Message-Id: b2290bc4b9fec6c756163a22ea081360.squirrel@atoth.sote.hu
In Reply to: Re: [gentoo-hardened] Python stops working after upgrade by PaX Team
1 2013.Május 30.(Cs) 01:39 időpontban PaX Team ezt írta:
2 >
3 > python should work with EMUTRAMP enabled only, there's no need to disable
4 > MPROTECT (unless there's more breakage than libffi but then i'd need more
5 > information on it). note also that the above PT_PAX value tries to turn
6 > on EMUTRAMP in softmode (beyond not disabling it in hardmode) but it'll
7 > fail to actually do so since PAGEEXEC/SEGMEXEC are not turned on at the
8 > same time. IOW, paxctl -zx is enough, no need for -zEx.
9 >
10
11 Disabling mprotect was needed for openoffice's pyuno bridge to function
12 long ago. It may be unnecessary these days. I have to retest.
13 Enabling emutramp on the binary seems to kill python on the other hand,
14 while it seems to operate correctly with "e" only.
15 --
16 dr Tóth Attila, Radiológus, 06-20-825-8057
17 Attila Toth MD, Radiologist, +36-20-825-8057