Gentoo Archives: gentoo-hardened

From: "Tóth Attila" <atoth@××××××××××.hu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Cannot istall java: pax-marking doesn't work properly with paxctl-ng
Date: Sun, 10 Feb 2013 12:00:07
Message-Id: cef01060cbcc9dffa3bd656778f0be4c.squirrel@atoth.sote.hu
In Reply to: Re: [gentoo-hardened] Cannot istall java: pax-marking doesn't work properly with paxctl-ng by "Anthony G. Basile"
1 I'm too late as I see, but for the record I did this:
2 --- java-vm-2-original.eclass 2013-02-08 00:11:02.531340263 +0100
3 +++ java-vm-2-dwokfur.eclass 2013-02-08 00:12:34.260199247 +0100
4 @@ -279,8 +279,11 @@
5
6 # Ensure a PaX header is created.
7 local pax_markings="C"
8 +
9 + pax-mark ${pax_markings} $(list-paxables "${executables[@]}")
10 +
11 # Usally disabeling MPROTECT is sufficent.
12 - local pax_markings+="m"
13 + local pax_markings="m"
14 # On x86 for heap sizes over 700MB disable SEGMEXEC and PAGEEXEC
15 as well.
16 use x86 && pax_markings+="sp"
17
18 So duplicated the pax mark for a separate C and m. I doesn't take care of
19 the ze problem.
20
21 Dw.
22 --
23 dr Tóth Attila, Radiológus, 06-20-825-8057
24 Attila Toth MD, Radiologist, +36-20-825-8057
25
26 2013.Február 8.(P) 20:33 időpontban Anthony G. Basile ezt írta:
27 > If you did the work upload the patch!
28 >
29 > On 02/08/2013 01:07 AM, "Tóth Attila" wrote:
30 >> Before reading the bug I modified the eclass exactly the same way how it
31 >> has been mentioned. And it solves the problem apart from the ongoing
32 >> discussion in the bug's thread.
33 >>
34 >
35 >
36 > --
37 > Anthony G. Basile, Ph. D.
38 > Chair of Information Technology
39 > D'Youville College
40 > Buffalo, NY 14201
41 > (716) 829-8197
42 >
43 >