First Last Prev Next    No search results available      Search page      Enter new bug
Bug#: 174951
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Java team <java@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Nicolas Litchinko <nicolas@litchinko.fr>
Add CC:
CC:
Remove selected CCs
URL:
Summary:
Status Whiteboard:
Keywords:

Filename Description Type Creator Created Size Actions
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 174951 depends on: Show dependency tree
Bug 174951 blocks:
Votes: 0    Show votes for this bug    Vote for this bug

Additional Comments: (this is where you put emerge --info)


Not eligible to see or edit group visibility for this bug.






View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug

Description:   Opened: 2007-04-17 18:37 0000 
Hi,

When the dev-java/sun-jdk ebuild was migrated to the pax-utils eclass, it
suddenly started to paxctl -m the binaries instead of -pemrs. It's still the
case with sun-jdk-1.4.2.13 if you have chpax installed but chpax is deprecated.

I noticed that something was wrong with java when I tried to build eclipse on a
fresh hardened system. The jvm was immediately killed by PaX. I used paxctl
-pmrs /opt/sun-jdk-1.4.2.13/{,jre}/bin/* and then I was able to build eclipse
successfully.

Considering java needs these permissions by design, it would help if the "pmrs"
permissions were granted directly by the ebuild.

Should the -m flag alone be enough?

Thank you in advance

------- Comment #1 From Petteri Räty 2007-04-18 14:53:25 0000 ------- 
Yeah it was changed in a patch by our hardened folks when switching to an
eclass to mark the files:
https://bugs.gentoo.org/attachment.cgi?id=103184

------- Comment #2 From Petteri Räty 2007-04-19 18:53:18 0000 ------- 
Hardened folks are saying that -m is only good for >=1.5 to to changing 1.4
back to -srpm leaving newer versions alone. Thanks for reporting and please
reopen if you still have issues with -r2.
First Last Prev Next    No search results available      Search page      Enter new bug