|
Lines 141-169
Link Here
|
| 141 |
einfo " ln -sf /opt/${P}/jre/plugin/i386/ns4/libjavaplugin.so" |
141 |
einfo " ln -sf /opt/${P}/jre/plugin/i386/ns4/libjavaplugin.so" |
| 142 |
fi |
142 |
fi |
| 143 |
|
143 |
|
| 144 |
# if chpax is on the target system, set the appropriate PaX flags |
144 |
ewarn "Disabling some PaX restrictions (${CHPAX_CONSERVATIVE_FLAGS})" |
| 145 |
# this will not hurt the binary, it modifies only unused ELF bits |
|
|
| 146 |
# but may confuse things like AV scanners and automatic tripwire |
| 147 |
if has_version sys-apps/chpax |
| 148 |
then |
| 149 |
echo |
| 150 |
einfo "setting up conservative PaX flags for jar, javac and java" |
| 151 |
|
| 152 |
for paxkills in "java" |
| 153 |
do |
| 154 |
chpax -${CHPAX_CONSERVATIVE_FLAGS} /opt/${P}/bin/$paxkills |
| 155 |
done |
| 156 |
|
145 |
|
| 157 |
# /opt/sun-jdk-1.4.2.03/bin/java_vm |
146 |
for paxkills in "java" |
| 158 |
chpax -${CHPAX_CONSERVATIVE_FLAGS} /opt/${P}/bin/java_vm |
147 |
do |
| 159 |
|
148 |
$(which scanelf) -Xxz ${CHPAX_CONSERVATIVE_FLAGS} /opt/${P}/bin/$paxkills |
| 160 |
einfo "you should have seen lots of chpax output above now" |
149 |
done |
| 161 |
ewarn "make sure the grsec ACL contains those entries also" |
|
|
| 162 |
ewarn "because enabling it will override the chpax setting" |
| 163 |
ewarn "on the physical files - help for PaX and grsecurity" |
| 164 |
ewarn "can be given by #gentoo-hardened + hardened@gentoo.org" |
| 165 |
fi |
| 166 |
|
150 |
|
|
|
151 |
$(which scanelf) -Xxz ${CHPAX_CONSERVATIVE_FLAGS} /opt/${P}/bin/java_vm |
| 152 |
|
| 167 |
if ! use X; then |
153 |
if ! use X; then |
| 168 |
echo |
154 |
echo |
| 169 |
ewarn "Some parts of Sun's JDK require virtual/x11 to be installed." |
155 |
ewarn "Some parts of Sun's JDK require virtual/x11 to be installed." |
