Bug 182734

Summary:	Non-functioning python UNO bridge on default hardened install
Product:	Gentoo Linux	Reporter:	Attila Tóth <atoth>
Component:	Hardened	Assignee:	The Gentoo Linux Hardened Team <hardened>
Status:	RESOLVED OBSOLETE
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Attila Tóth 2007-06-20 21:28:21 UTC

I've recently installed bibus, which would be an extremely important program for me to get rid of EndNote@windows.
I've succesfully set up bibus-1.2.0 on gentoo. I have openoffice-2.2.1 compiled using system's python. Python-2.4.4-r4 is compiled with ucs4. I have wxGTK-2.4.2, wxGTK-2.6.3.3 and wxpython-2.6.3.3 installed.
I've followed the documentation and successfully set up a MySQL database for bibus, which works fine. I've also used the macro shipped with bibus to activate UNO listening function.
Everytime I tried to connect to openoffice from bibus, the program hanged. If I used netstat, it showed, that the connection was established. I dig myself into openoffice pyuno config files and environment variables: finally I had PYTHONPATH and LD_LIBRARY_PATH exported everywhere one can imagine. If I try "import uno" and "import unohelper" I got no error messages. Systems logs showed nothing mentionable related to this problem.

I've ended up with a simple hello world pyuno program, which also hanged
just right after initiating the connection.

With the valuable help of Jörg Budischewski, I could further track down the problem.
It turned out, that if I boot a non-secured kernel python-UNO-bridge works fine. The next step was to determine which security option interacts badly with python-UNO. CONFIG_PAX_MPROTECT is guilty.
For those who want quick a workaround:
Paxctl userland tool can change the security settings on a per binary basis. Disabling MPROTECT on the python executable will provide a temporary fix at the expense of lowering the system's security measures.

Reproducible: Always

Steps to Reproduce: