459890 – dev-lisp/clisp on hardened - ./lisp.run: error while loading shared libraries: libavcall.so.0: cannot enable executable stack as shared object requires: Permission denied

Bug 459890 - dev-lisp/clisp on hardened - ./lisp.run: error while loading shared libraries: libavcall.so.0: cannot enable executable stack as shared object requires: Permission denied

Summary: dev-lisp/clisp on hardened - ./lisp.run: error while loading shared libraries...

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	[OLD] Development (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Common Lisp Bugs

URL:
Whiteboard:
Keywords:

Duplicates (2):	521240 533110 (view as bug list)
Depends on:	253963 459710
Blocks:
	Show dependency tree

Reported:	2013-03-01 15:37 UTC by Markus Walter
Modified:	2015-01-26 21:18 UTC (History)
CC List:	3 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
patch to inject paxctl -m into the makefile (clisp-makefile.patch,342 bytes, text/plain) 2013-03-01 15:37 UTC, Markus Walter	Details
patch to insert one more paxctl -m into another build script (clisp-link.patch,287 bytes, text/plain) 2013-03-01 15:37 UTC, Markus Walter	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Markus Walter 2013-03-01 15:37:03 UTC

Created attachment 340648 [details]
patch to inject paxctl -m into the makefile

On my hardened ~amd64 machine clisp failed to build with errors like the following. 

===
./lisp.run: error while loading shared libraries: libavcall.so.0: cannot enable executable stack as shared object requires: Permission denied
===

I needed to apply the two attached patches (essentially "paxctl -m" on the offending files) to make it work. This is somewhat related to bug #459710 which is about the library with executable stack.

Comment 1 Markus Walter 2013-03-01 15:37:34 UTC

Created attachment 340650 [details]
patch to insert one more paxctl -m into another build script

Comment 2 Jeroen Roovers (RETIRED) gentoo-dev

2014-09-24 15:49:25 UTC

*** Bug 521240 has been marked as a duplicate of this bug. ***

Comment 3 Chris Henhawke 2014-11-01 12:38:28 UTC

Any updates?  I am running into this bug while trying to update to =dev-lisp/clisp-2.48-r1.  Thanks

Comment 4 Chris Henhawke 2014-11-01 12:43:07 UTC

Oops, meant to say to =dev-lisp/clisp-2.49-r8.

Comment 5 Markus Walter 2014-11-02 22:05:47 UTC

(In reply to Chris Henhawke from comment #3)
> Any updates?  I am running into this bug while trying to update to
> =dev-lisp/clisp-2.49-r1.  Thanks

For me =dev-lisp/clisp-2.49-r1::gentoo works just fine, if I apply the patches from bug #253963 to  dev-libs/ffcall.

Comment 6 Mark Wright gentoo-dev

2015-01-05 11:42:57 UTC

*** Bug 533110 has been marked as a duplicate of this bug. ***

Comment 7 Magnus Granberg gentoo-dev

2015-01-26 20:57:33 UTC

looks like ffcall is fixed
so this bug is fixed to
Close?

Comment 8 Markus Walter 2015-01-26 21:18:27 UTC

(In reply to Magnus Granberg from comment #7)
> looks like ffcall is fixed
> so this bug is fixed to
> Close?

Yes, works fine now.