Bug 375795

Summary:	app-emulation/qemu-user-0.9.0 and app-emulation/qemu-0.11.1.ebuild should add -z,execheap unconditionally
Product:	Gentoo Linux	Reporter:	Anthony Basile <blueness>
Component:	Current packages	Assignee:	Luca Barbato <lu_zero>
Status:	RESOLVED WONTFIX
Severity:	normal	CC:	hardened-kernel+disabled, hardened, qemu+disabled
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	508098
Bug Blocks:	375561

Description Anthony Basile gentoo-dev

2011-07-20 19:34:32 UTC

The ebuild qemu-user-0.9.0.ebuild makes a check for the existence of /sbin/paxctl to conditionally add -Wl,-z,execheap to VL_LDFLAGS.  This is not a good approach since the existance of paxctl does not guarantee whether or not the emulator binaries will be run under a pax hardened kernel.

A better approach might be to simply sed unconditionally.

Reproducible: Always

Comment 1 Aleister 2011-08-08 04:42:55 UTC

(In reply to comment #0)
dont know the right place but i noticed that app-emulation/qemu-kvm also includes a hardened useflag. You might want to look into that :)

Comment 2 SpanKY gentoo-dev

2014-05-30 04:40:23 UTC

qemu-user has been removed from the tree as its functionality has been superseded by the combined app-emulation/qemu package.  if you find the qemu package does not support something that the qemu-user package did, please file a new bug explicitly detailing things so we can get it added.