Re: [gentoo-hardened] mysql 4.1 requires shlib_t:file execmod?

[Antoine Martin]

On Sat, 2005-10-22 at 20:56 +0300, Petre Rodan wrote:
> On Sat, Oct 22, 2005 at 06:31:35PM +0100, Antoine Martin wrote:
> > On Sat, 2005-10-22 at 19:24 +0200, pageexec@××××××××.hu wrote:
> > > On 22 Oct 2005 at 17:37, Antoine Martin wrote:
> > > > scanelf -T /usr/lib/libmysqlclient.so.14
> > > > shows nothing at all.
> > > > (I also tried adding a -R, even -a shows nothing!)
> > >
> > > ok, so it's not textrels, can you post an strace output then?
execve("/usr/sbin/postfix", ["postfix"], [/* 26 vars */]) = 0
uname({sys="Linux", node="removed", ...}) = 0
brk(0)                                  = 0x805a000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or
directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=12039, ...}) = 0
mmap2(NULL, 12039, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7fd8000
close(3)                                = 0
open("/usr/lib/libpcre.so.0", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300\22"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=186644, ...}) = 0
mmap2(NULL, 188080, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
0) = 0xb7faa000
mmap2(0xb7fc1000, 94208, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_DENYWRITE, 3, 0x16) = 0xb7fc1000
close(3)                                = 0
open("/lib/libdl.so.2", O_RDONLY)       = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0\f\0\000"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=10440, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0xb7fa9000
mmap2(NULL, 12392, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0)
= 0xb7fa5000
mmap2(0xb7fa7000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_DENYWRITE, 3, 0x1) = 0xb7fa7000
close(3)                                = 0
open("/lib/libcrypt.so.1", O_RDONLY)    = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\200\10"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=22424, ...}) = 0
mmap2(NULL, 184636, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
0) = 0xb7f77000
mprotect(0xb7f7b000, 168252, PROT_NONE) = 0
mmap2(0xb7f7c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_DENYWRITE, 3, 0x4) = 0xb7f7c000
mmap2(0xb7f7e000, 155964, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_ANONYMOUS, -1, 0) = 0xb7f7e000
close(3)                                = 0
open("/lib/libpthread.so.0", O_RDONLY)  = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0C\0\000"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=141357, ...}) = 0
mmap2(NULL, 332928, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
0) = 0xb7f25000
mmap2(0xb7f33000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_DENYWRITE, 3, 0xd) = 0xb7f33000
mmap2(0xb7f35000, 267392, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_ANONYMOUS, -1, 0) = 0xb7f35000
close(3)                                = 0
open("/lib/libpam.so.0", O_RDONLY)      = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0\24\0"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=31820, ...}) = 0
mmap2(NULL, 33608, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0)
= 0xb7f1c000
mmap2(0xb7f24000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_DENYWRITE, 3, 0x7) = 0xb7f24000
close(3)                                = 0
open("/usr/lib/libmysqlclient.so.14", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0\254\3"...,
512) = 512fstat64(3, {st_mode=S_IFREG|0755, st_size=2065804, ...}) = 0
mmap2(NULL, 2061732, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
0) = 0xb7d24000
mmap2(0xb7e2a000, 966656, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_DENYWRITE, 3, 0x106) = 0xb7e2a000
mmap2(0xb7f16000, 21924, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_ANONYMOUS, -1, 0) = 0xb7f16000
close(3)                                = 0
open("/lib/libm.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\2003\0"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=153240, ...}) = 0
mmap2(NULL, 139424, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
0) = 0xb7d01000
mmap2(0xb7d22000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_DENYWRITE, 3, 0x20) = 0xb7d22000
close(3)                                = 0
open("/lib/libz.so.1", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\200\22"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=67304, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0xb7d00000
mmap2(NULL, 68788, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0)
= 0xb7cef000
mmap2(0xb7cff000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_DENYWRITE, 3, 0xf) = 0xb7cff000
close(3)                                = 0
open("/usr/lib/libsasl2.so.2", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0@1\0\000"...,
512) = 512fstat64(3, {st_mode=S_IFREG|0755, st_size=85968, ...}) = 0
mmap2(NULL, 84840, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0)
= 0xb7cda000
mmap2(0xb7cee000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_DENYWRITE, 3, 0x14) = 0xb7cee000
close(3)                                = 0
open("/usr/lib/libdb-4.2.so", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300\204"...,
512) = 512fstat64(3, {st_mode=S_IFREG|0755, st_size=893788, ...}) = 0
mmap2(NULL, 880156, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
0) = 0xb7c03000
mmap2(0xb7cd8000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_DENYWRITE, 3, 0xd5) = 0xb7cd8000
close(3)                                = 0
open("/lib/libnsl.so.1", O_RDONLY)      = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0@5\0\000"...,
512) = 512fstat64(3, {st_mode=S_IFREG|0755, st_size=75176, ...}) = 0
mmap2(NULL, 83968, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0)
= 0xb7bee000
mmap2(0xb7bff000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_DENYWRITE, 3, 0x10) = 0xb7bff000
mmap2(0xb7c01000, 6144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_ANONYMOUS, -1, 0) = 0xb7c01000
close(3)                                = 0
open("/lib/libresolv.so.2", O_RDONLY)   = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300%\0"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=64568, ...}) = 0
mmap2(NULL, 76052, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0)
= 0xb7bdb000
mmap2(0xb7bea000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_DENYWRITE, 3, 0xe) = 0xb7bea000
mmap2(0xb7bec000, 6420, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_ANONYMOUS, -1, 0) = 0xb7bec000
close(3)                                = 0
open("/lib/libc.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0000V\1\000"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1191456, ...}) = 0
mmap2(NULL, 1137972, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
0) = 0xb7ac5000
mprotect(0xb7bd4000, 27956, PROT_NONE)  = 0
mmap2(0xb7bd5000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_DENYWRITE, 3, 0x10f) = 0xb7bd5000
mmap2(0xb7bd9000, 7476, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
MAP_ANONYMOUS, -1, 0) = 0xb7bd9000
close(3)                                = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0xb7ac4000
mprotect(0xb7bd5000, 4096, PROT_READ)   = 0
mprotect(0xb7d24000, 1073152, PROT_READ|PROT_WRITE) = 0
mprotect(0xb7d24000, 1073152, PROT_READ|PROT_EXEC) = -1 EACCES
(Permission denied)
writev(2, [{"postfix", 7}, {": ", 2}, {"error while loading shared
libra"..., 36}, {": ", 2}, {"/usr/lib/libmysqlclient.so.14", 29}, {": ",
2}, {"cannot restore segment prot afte"..., 39}, {": ", 2}, {"Permission
denied", 17}, {"\n", 1}], 10postfix: error while loading shared
libraries: /usr/lib/libmysqlclient.so.14: cannot restore segment prot
after reloc: Permission denied
) = 137
exit_group(127)                         = ?

-- 
gentoo-hardened@g.o mailing list