* Applying nvidia-drivers-364.12-pax.patch ... * Failed Patch: nvidia-drivers-364.12-pax.patch ! * ( /usr/portage/x11-drivers/nvidia-drivers/files/nvidia-drivers-364.12-pax.patch ) * * Include in your bugreport the contents of: $ cat emerge-info.txt ----------------------------------------------------------------- This is an unstable amd64 chroot image (named amd64-hardened-unstable_20160605-224713) at a hardened host acting as a tinderbox. ----------------------------------------------------------------- make.conf: USE="sse2 pax_kernel xtpax -cdinstall -oci8 -bindist btrfs bugzilla -cairo cddb compat -consolekit csc drmkms -dvd eglfs gd gnomecanvas gzip haptic hdf5 ibus inifile ipv6 isag javafx kvm latex libkms melt midi minizip mpeg mysqli obj ois opencv openexr openssl pcre16 php postgres postproc -printsupport pwquality qt3support qt4 rdoc scrypt smartcard sql sse4_2 theora truetype -usb v4l2 -vaapi -vala -x264" ----------------------------------------------------------------- Portage 2.3.0_rc1 (python 2.7.11-final-0, hardened/linux/amd64, gcc-5.4.0, glibc-2.23-r2, 4.5.7-hardened-r1 x86_64) ================================================================= System uname: Linux-4.5.7-hardened-r1-x86_64-Intel-R-_Core-TM-_i7-3770_CPU_@_3.40GHz-with-gentoo-2.2 KiB Mem: 16157888 total, 2384072 free KiB Swap: 16777212 total, 16736168 free Timestamp of repository gentoo: Wed, 15 Jun 2016 13:22:42 +0000 sh bash 4.3_p42-r2 ld GNU ld (Gentoo 2.25.1 p1.1) 2.25.1 distcc 3.2rc1 x86_64-pc-linux-gnu [disabled] app-shells/bash: 4.3_p42-r2::gentoo dev-java/java-config: 2.2.0-r3::gentoo dev-lang/perl: 5.24.0-r1::gentoo dev-lang/python: 2.7.11-r2::gentoo, 3.4.4::gentoo, 3.5.1-r3::gentoo dev-util/cmake: 3.5.2-r1::gentoo sys-apps/baselayout: 2.2::gentoo sys-apps/openrc: 0.21::gentoo sys-apps/sandbox: 2.10-r2::gentoo sys-devel/autoconf: 2.13::gentoo, 2.69-r2::gentoo sys-devel/automake: 1.9.6-r4::gentoo, 1.10.3-r2::gentoo, 1.11.6-r2::gentoo, 1.13.4-r1::gentoo, 1.14.1-r1::gentoo, 1.15-r2::gentoo sys-devel/binutils: 2.25.1-r1::gentoo sys-devel/gcc: 5.4.0::gentoo sys-devel/gcc-config: 1.8-r1::gentoo sys-devel/libtool: 2.4.6-r2::gentoo sys-devel/make: 4.2.1::gentoo sys-kernel/linux-headers: 4.6::gentoo (virtual/os-headers) sys-libs/glibc: 2.23-r2::gentoo Repositories: gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://rsync.gentoo.org/gentoo-portage priority: 1 local location: /usr/local/portage masters: gentoo priority: 2 ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="*" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=native -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /etc/grs/systems.conf /etc/omega.conf /etc/stunnel/stunnel.conf /usr/lib64/tomoyo/conf /usr/share/config /usr/share/easy-rsa /usr/share/gnupg/qualified.txt /usr/share/qpsmtpd/plugins /var/rancid/.cloginrc" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.5/ext-active/ /etc/php/apache2-php7.0/ext-active/ /etc/php/cgi-php5.5/ext-active/ /etc/php/cgi-php7.0/ext-active/ /etc/php/cli-php5.5/ext-active/ /etc/php/cli-php7.0/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=native -O2 -pipe" DISTDIR="/var/tmp/distfiles" EMERGE_DEFAULT_OPTS="--verbose-conflicts --color=n --nospinner --tree --quiet-build" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync network-sandbox parallel-fetch preserve-libs protect-owned sandbox sfperms strict test-fail-continue unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://ftp.uni-erlangen.de/pub/mirrors/gentoo rsync://mirror.netcologne.de/gentoo/ ftp://sunsite.informatik.rwth-aachen.de/pub/Linux/gor.bytemark.co.uk/gentoo/ rsync://ftp.snt.utwente.nl/gentoo" LANG="en_US.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j1" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git" PORTAGE_TMPDIR="/var/tmp" USE="acl amd64 berkdb btrfs bugzilla bzip2 cddb cli compat cracklib crypt csc cxx dri drmkms eglfs gd gdbm gnomecanvas gzip haptic hardened hdf5 ibus iconv inifile ipv6 isag javafx justify kvm latex libkms melt midi minizip mmx mmxext modules mpeg multilib mysqli ncurses nls nptl obj ois opencv openexr openmp openssl pam pax_kernel pcre pcre16 php pie postgres postproc pwquality qt3support qt4 rdoc readline scrypt seccomp session smartcard sql sse sse2 sse4_2 ssl ssp tcpd theora truetype unicode urandom v4l2 xattr xtpax zlib" ABI_X86="64" ALSA_CARDS="hda-intel" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_4" RUBY_TARGETS="ruby20 ruby21" USERLAND="GNU" VIDEO_CARDS="intel i965" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON
Created attachment 437658 [details] emerge-history.txt
Created attachment 437660 [details] environment
Created attachment 437662 [details] nvidia-drivers-364.12-pax.patch.out
Created attachment 437664 [details] x11-drivers:nvidia-drivers-367.27:20160615-152528.log
This is literally the 10th time or so this happens (just run a bug search). Can we get the package maintainer to at least check that the patch still applies before bumping the package? If there is no PaX patch available I'm fine with having it masked on hardened until one is, but it's silly to have to deal with build failures and manual masking every time.
Created attachment 445560 [details, diff] nvidia-drivers-367.35-pax.patch
A patch* that works for from 367.35 all the way up to the latest at the time or writing. Can we get it added? A temporary workaround is to mask the pax_kernel flag and drop the patch into /etc/portage/patches/x11-drivers/nvidia-drivers. *https://www.grsecurity.net/~paxguy1/
(In reply to Hector Martin from comment #5) > Can we get the package maintainer to at least check that the patch still > applies before bumping the package? You mean the hardened@ team, right?
commit 038e56981c1c49fd5930a60bbea5ee0cd660356b Author: Zero_Chaos <zerochaos@gentoo.org> Date: Tue Oct 25 15:42:41 2016 -0400 x11-drivers/nvidia-drivers: fix pax patch for 367.57/370.28 Package-Manager: portage-2.3.2 I guess that's fixed?
Created attachment 455112 [details, diff] NVIDIA Drivers 375.20 PAX Patch
