Gentoo Archives: gentoo-hardened

From: Antoine Martin <antoine@××××××××××.uk>
To: gentoo-hardened@l.g.o
Cc: SELinux <selinux@×××××××××.gov>
Subject: Re: [gentoo-hardened] mysql 4.1 requires shlib_t:file execmod?
Date: Mon, 24 Oct 2005 11:32:28
Message-Id: 1130094399.22489.9.camel@localhost.localdomain
In Reply to: Re: [gentoo-hardened] mysql 4.1 requires shlib_t:file execmod? by solar
1 > > > #1
2 > > > qlist mysql | scanelf -qtf -
3 > > TEXTREL /usr/lib/mysql/libmysqlclient.so
4 > > TEXTREL /usr/lib/mysql/libmysqlclient_r.so
5 > > TEXTREL /usr/lib/libmysqlclient.so
6 > > TEXTREL /usr/lib/libmysqlclient.so.14.0.0
7 > > TEXTREL /usr/lib/libmysqlclient_r.so
8 > > TEXTREL /usr/lib/libmysqlclient_r.so.14.0.0
9 >
10 > Looks like you do infact have textrels in your mysql.
11 > I've seen this happen before when linked with a miscompiled
12 > libcrypto.so
13 I've rebuilt openssl, but this hasn't helped...
14
15 > > > #2
16 > > > scanelf -a /usr/lib/libmysqlclient.so.14
17 > > Nothing here
18 >
19 > If nothing here then chances are your running scanelf while trying to
20 > enforce and no such policy exists for scanelf.
21 I must have done it wrong (it works even in enforcing mode now):
22
23 TYPE PAX STK/REL/PTL TEXTREL RPATH BIND FILE
24 ET_DYN ---xe- RW- --- RW- TEXTREL -
25 LAZY /usr/lib/libmysqlclient.so.14
26
27 > > >
28 > > > #3
29 TYPE PAX STK/REL/PTL TEXTREL RPATH BIND FILE
30 ET_DYN ---xe- RW- R-- RW- - - LAZY /lib/libcrypt.so.1
31 ET_DYN ---xe- RW- R-- RW- - - LAZY /lib/libnsl.so.1
32 ET_DYN ---xe- RW- R-- RW- - - LAZY /lib/libm.so.6
33 ET_DYN ---xe- RW- --- RW- - - LAZY /lib/libz.so.1
34 ET_DYN ---xe- RW- R-- RW- - - NOW /lib/libc.so.6
35
36
37 --
38 gentoo-hardened@g.o mailing list