Re: [gentoo-hardened] Mono build failure

[Chris S]

pageexec@××××××××.hu wrote:

>what matters for letting mono run under PaX is that you have to exempt
>it for runtime code generation. i don't know how apache/mono interact,
>but you'll see it from the PaX kill logs and you'll have to paxctl -m
>the affected process.
>
>if it's apache itself (e.g., it uses mono as some module vs. running
>mono as a separate process) then you're best off by having two apache
>binaries, one you should use for serving normal web content and run
>it with full PaX protections, and the other for serving mono stuff
>and have it exempted. in any case, you'll have to exempt the mono
>executable itself since it generates code at runtime.
>
>
>
Thanks for all your advice. I believe mod_mono passes code off to xsp, 
mono project's own little webserver.
Perhaps I can look into excluding this from pax.

Thank you for your other emails, I will be looking into it.

Cheers,
-c
-- 
gentoo-hardened@g.o mailing list