| 1 |
On Mon, 2005-10-24 at 23:23 +0200, pageexec@××××××××.hu wrote: |
| 2 |
> On 24 Oct 2005 at 20:15, Antoine Martin wrote: |
| 3 |
> > But this is not the right way to do it, I admit this is only a very tiny |
| 4 |
> > security risk, but I would much rather figure out a way to fix the |
| 5 |
> > library to not require execmod. No other library requires it, and the |
| 6 |
> > previous version of mysql I was using (4.0) didn't either. |
| 7 |
> |
| 8 |
> indeed, the underlying reason is what we remedied, or so i |
| 9 |
> thought so i'm all the more curious how you ended up with |
| 10 |
> textrels again. fwiw, i can't find any DES related symbols |
| 11 |
> in 4.1.14 and 5.0.13, so i'm wondering if it's USE flag |
| 12 |
> dependent maybe (in which case mysql is probably statically |
| 13 |
> linking a crypto library). what are yours? |
| 14 |
USE="-X mysql sasl ipv6 nptl hardened" |
| 15 |
|
| 16 |
dev-db/mysql-4.1.14 +berkdb -big-tables -cluster -debug -doc -extraengine -geometry -minimal +perl +readline +selinux +ssl -static +tcpd -utf8 |
| 17 |
|
| 18 |
|
| 19 |
Antoine |
| 20 |
|
| 21 |
-- |
| 22 |
gentoo-hardened@g.o mailing list |
Archives