Gentoo Archives: gentoo-hardened

From: "Tóth Attila" <atoth@××××××××××.hu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Firefox won't compile on hardened profile
Date: Sun, 19 Feb 2012 18:02:33
Message-Id: 578f1040a89718cce400322b5b52ebe5.squirrel@atoth.sote.hu
In Reply to: Re: [gentoo-hardened] Firefox won't compile on hardened profile by Hinnerk van Bruinehsen
1 There's a snippet in your ebuild:
2 "append-flags -mno-avx"
3
4 What is the problem with avx? Is it an option counteracting with security?
5
6 Regards:
7 Dw.
8 --
9 dr Tóth Attila, Radiológus, 06-20-825-8057
10 Attila Toth MD, Radiologist, +36-20-825-8057
11
12 2012.Február 15.(Sze) 18:10 időpontban Hinnerk van Bruinehsen ezt írta:
13 > -----BEGIN PGP SIGNED MESSAGE-----
14 > Hash: SHA1
15 >
16 > On 15.02.2012 17:39, Grant wrote:
17 >>>>>> Firefox won't compile on my system due to the issue
18 >>>>>> described here:
19 >>>>>>
20 >>>>>> http://www.gossamer-threads.com/lists/gentoo/hardened/245060
21 >>>>>
22 >>>>>
23 >>>>>>
24 > FWIW: I had no trouble compiling Firefox 9.0 on my amd64 system
25 >>>>> using the current stable 3.2.2-r1 kernel, gcc 4.5.3,
26 >>>>> grsec/pax enabled.
27 >>>>
28 >>>> To confirm, you aren't on a hardened profile?
29 >>>
30 >>> I am on a hardened profile, currently using
31 >>> hardened/linux/amd64/no-multilib/selinux profile, only running
32 >>> stable software.
33 >>
34 >> I don't get it then. Does anyone know why I can't compile Firefox
35 >> as described in the link above? This sums it up:
36 >>
37 >> "firefox-9.0 ebuild stalls at the install phase while xpcshell
38 >> command tops CPU usage for hours."
39 >>
40 >> Although xpcshell doesn't use any CPU for me. It just sits there
41 >> and the install phase doesn't proceed.
42 >>
43 >> - Grant
44 >>
45 >
46 > I can compile Icecat with a customized ebuild. since it's basically
47 > the same as Firefox, maybe that helps. Basically it disables jit.
48 >
49 >
50 > -----BEGIN PGP SIGNATURE-----
51 > Version: GnuPG v2.0.18 (GNU/Linux)
52 > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
53 >
54 > iQEcBAEBAgAGBQJPO+caAAoJEJwwOFaNFkYcuugH/jTv4dy6tQ6PnC6ZqHioUOiK
55 > U6xdXra8jxS1Wi9y6iVr1mRmycXZZv8GD5ZLjs4BJl3UofyfoqLmjTt0R+myn5R9
56 > 1ovZD9y1tTYIRRnA+HI7d7ZuNLwTULLcCmmXL7/TIg/1spi7K5JCKmbTGLPvcAJ+
57 > MyrLSeiyCTK6iI384legi13Mw7B7k4G6Y0ZS1izZah/zno0uiPawLjcIE6LJPsMP
58 > UhOMiW4YY5Xn+jdNqaHWN/87E3+Y+OUWCLqrP+8itK2afQoj5l4zs9b8JUcdEHPs
59 > Y5JgI5dtGrWndkJMklerzSXQ20/8EKg1lJCxmHS7Ii85Icd3RxF3xwE2PjAVI1U=
60 > =zfn0
61 > -----END PGP SIGNATURE-----
62 >

Replies

Subject Author
Re: [gentoo-hardened] Firefox won't compile on hardened profile Grant <emailgrant@×××××.com>