Created attachment 289855 [details] build.log =dev-lang/v8-3.6.5.1 fails to compile Portage 2.1.10.11 (hardened/linux/x86, gcc-4.4.5, glibc-2.12.2-r0, 2.6.39-gentoo i686) ================================================================= System uname: Linux-2.6.39-gentoo-i686-Intel-R-_Celeron-R-_M_CPU_430_@_1.73GHz-with-gentoo-2.0.3 Timestamp of tree: Sat, 15 Oct 2011 08:30:01 +0000 app-shells/bash: 4.1_p9 dev-lang/python: 2.7.1-r1 dev-util/cmake: 2.8.4-r1 dev-util/pkgconfig: 0.26 sys-apps/baselayout: 2.0.3 sys-apps/openrc: 0.8.3-r1 sys-apps/sandbox: 2.4 sys-devel/autoconf: 2.13, 2.68 sys-devel/automake: 1.9.6-r3, 1.11.1 sys-devel/binutils: 2.20.1-r1 sys-devel/gcc: 4.4.5 sys-devel/gcc-config: 1.4.1-r1 sys-devel/libtool: 2.4-r1 sys-devel/make: 3.82-r1 sys-kernel/linux-headers: 2.6.39 (virtual/os-headers) sys-libs/glibc: 2.12.2 Repositories: gentoo x-portage ACCEPT_KEYWORDS="x86" ACCEPT_LICENSE="*" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -march=prescott" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo" CXXFLAGS="-O2 -march=prescott" DISTDIR="/media/sources" EMERGE_DEFAULT_OPTS="--with-bdeps y" FEATURES="assume-digests binpkg-logs collision-protect distlocks ebuild-locks fixlafiles fixpackages news parallel-fetch protect-owned sandbox sfperms split-log strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox" FFLAGS="" GENTOO_MIRRORS="http://distfiles.gentoo.org" LANG="it_IT.UTF-8" LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu" LINGUAS="en en_GB" MAKEOPTS="-j1" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="X aac acl acpi alsa apic bash-completion berkdb bzip2 cairo cli consolekit cracklib crypt custom-cflags custom-optimization cxx dbus dri dvd extras ffmpeg gdbm gpm gtk hardened iconv jpeg jpeg2k kde lame lm_sensors mad mmx modules mp3 mudflap ncurses networkmanager nls nptl nptlonly nsplugin opengl openmp pam pax_kernel pcre pic png policykit pppd qt3support qt4 readline semantic-desktop session sse sse2 ssl svg symlink sysfs tcpd threads tiff tordns udev urandom x264 x86 xorg zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" CAMERAS="ptp2" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev synaptics" KERNEL="linux" LINGUAS="en en_GB" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="intel" Unset: CPPFLAGS, CTARGET, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Maybe a hardend thing?
(In reply to comment #1) > Maybe a hardend thing? From grsec.log: Oct 15 11:18:23 devil kernel: grsec: denied RWX mmap of <anonymous mapping> by /tmp/portage/dev-lang/v8-3.6.5.1/work/v8-3.6.5.1/out/ia32.release/mksnapshot[mksnapshot:7045] uid/euid:250/250 gid/egid:250/250, parent /bin/bash[sh:7043] uid/euid:250/250 gid/egid:250/250 Oct 15 11:18:23 devil kernel: grsec: Segmentation fault occurred at 000000b7 in /tmp/portage/dev-lang/v8-3.6.5.1/work/v8-3.6.5.1/out/ia32.release/mksnapshot[mksnapshot:7045] uid/euid:250/250 gid/egid:250/250, parent /bin/bash[sh:7043] uid/euid:250/250 gid/egid:250/250
disable mprotect(), see pax-utils eclass. Also, is this mksnapshot thingy a test? At least it looks like it is..
As I understand it, mksnapshot builds a "heap image" to enhance v8's performance at startup. We are disabling this for www-client/chromium based on host-is-pax, so I have done the same here. Can you give it another test ago?
(In reply to comment #4) > As I understand it, mksnapshot builds a "heap image" to enhance v8's > performance at startup. > > We are disabling this for www-client/chromium based on host-is-pax, so I have > done the same here. > > Can you give it another test ago? Why don't you try to disable mprotect first?
(In reply to comment #5) > (In reply to comment #4) > > As I understand it, mksnapshot builds a "heap image" to enhance v8's > > performance at startup. > > > > We are disabling this for www-client/chromium based on host-is-pax, so I have > > done the same here. > > > > Can you give it another test ago? > > Why don't you try to disable mprotect first? mksnapshot is built as a dependency of the main target, so I don't have an opportunity to call pax-mark before the build system executes it.
(In reply to comment #4) > Can you give it another test ago? Yes, I'll do
Fixed, good job ;)
