[patch] set -m on mono for PAX enable kernels

mono-2.6.7-mprotect_ebuild.patch (text/plain), 2.18 KB, created by Magnus Granberg on 2010-08-02 11:31:10 UTC

2010-08-02	Magnus Granberg	<[e-mail]>

		#286280
		We disable MPROTECT on the mono binary

--- a/dev-lang/mono/mono-2.6.7.ebuild        2010-07-21 17:13:14.000000000 +0000
+++ b/dev-lang/mono/mono-2.6.7.ebuild  2010-08-01 17:53:30.000000000 +0000
@@ -4,7 +4,7 @@
 
 EAPI=2
 
-inherit linux-info mono eutils flag-o-matic multilib go-mono
+inherit linux-info mono eutils flag-o-matic multilib go-mono pax-utils
 
 DESCRIPTION="Mono runtime and class libraries, a C# compiler/interpreter"
 HOMEPAGE="http://www.go-mono.com"
@@ -12,7 +12,7 @@
 LICENSE="MIT LGPL-2.1 GPL-2 BSD-4 NPL-1.1 Ms-PL GPL-2-with-linking-exception IDPL"
 SLOT="0"
 KEYWORDS="~amd64 ~ppc ~x86"
-IUSE="xen moonlight minimal"
+IUSE="xen moonlight minimal hardened"
 
 #Bash requirement is for += operator
 COMMONDEPEND="!<dev-dotnet/pnet-0.6.12
@@ -27,7 +27,8 @@
 
 DEPEND="${COMMONDEPEND}                                                                                                               
        sys-devel/bc                                                                                                                   
-       >=app-shells/bash-3.2"                                                                                                         
+       >=app-shells/bash-3.2                                                                                                          
+       hardened? ( sys-apps/paxctl )"                                                                                                 
 PDEPEND="dev-dotnet/pe-format"                                                                                                        
 
 MAKEOPTS="${MAKEOPTS} -j1"
@@ -69,6 +81,12 @@
                > "${WORKDIR}"/mono-2.2-libdir126.patch ||
                die "Sedding patch file failed"
        go-mono_src_prepare
+       # we need to sed in the paxctl -m in the runtime/mono-wrapper.in so it don't
+       # get killed in the build proces when MPROTEC is enable. #286280
+       if use hardened ; then
+               ewarn "We are disabling MPROTECT on the mono binary."
+               sed '/exec/ i\paxctl -m "$r/@mono_runtime@"' -i "${S}"/runtime/mono-wrapper.in
+       fi
 }
 
 src_configure() {