Re: [gentoo-hardened] Python stops working after upgrade

[Magnus Granberg]

torsdag 30 maj 2013 11.13.45 skrev  Anthony G. Basile:
>
> migrate-pax also will copy PT_PAX to XATTR_PAX flags identically with
> one exception, if PT_PAX = "-e---" then no user.pax.flags xattr is
> created.  I am always thinking in terms of either PAX_PT_PAX_FLAGS xor
> PAX_XATTR_PAX_FLAGS is on, not both.  When both are on, we fall back on
> what you describe.  So I adopted the approach: don't copy "-e---" to
> XATTR_PAX and when you reboot into a PAX_PT_PAX_FLAGS=n and
> PAX_XATTR_PAX_FLAGS=y kernel, you'll get the desired behavior.
>
> A good approach or no?
To use xattr pax flags PAX_MARKINGS need to be set to XT in make.conf
else will portage default to PT when marking.
Python need EMUTRAMP enable in the kernel with newer libffi and python
and have the E mark on the binary.
/Magnus