Re: [gentoo-hardened] problems with bittorrent and bittornado

[Rumen Yotov]

Hi,
On нд, 2004-08-01 at 13:01, pageexec@××××××××.hu wrote:
> > > Used strace and it seems that PaX is the culpit, could somebody confirm
> > > this?
> >
> > Your understanding of the problem seems backwards. python is probably
> > the culpit and PaX is only making it obvious that something else has a
> > fundamental code flaw.
> > (It bugs me when I see people blame pax & grsec for faulty software)
>
> ok, after having looked at the strace, i see a few things only:
>
> 1. there's a sign of ld.so:make_stack_executable() failing, apparently
>    because /usr/lib/libcrypto.so.0.9.7 is marked with an executable
>    PT_GNU_STACK. i think that's a known false positive (PT_PAX_FLAGS
>    doesn't have emutramp enabled here).
>
> 2. there's only one mmap request that creates (well, tries to ;-) a
>    writable/executable mapping and that's right after mapping psyco.so.
>    based on the package description ("[it] can massively speed up the
>    execution of any Python code") i bet it does exactly that by generating
>    code at runtime (the website confirms that it does JIT compilation),
>    hence it will not work with non-executable pages. since this is a
>    library you have to disable MPROTECT on the executable that uses it,
>    in this case python.
>
> PS: rumen, i think you don't need to bother with those extra logs and
>     straces i asked for in the previous mail, just disable MPROTECT
>     on python and be done with it (i've tested it here).
>
>
> --
> gentoo-hardened@g.o mailing list
>
Did it, see previous mail-reply (disabled ALL ASLR on python).
Still no luck.
...Later...
Some success after unmerging psyco, bittorrent starts and gives
following error:
[15:47:35] Problem connecting to tracker - <urlopen error (111,
'Connection refused')>
I'll look at it later, maybe firewall (shorewall-port) problem or too
many requests, don't know.
Thanks.
Rumen