Bug 458268 – app-antivirus/clamav: hardened use-flag added

• Product: Gentoo Linux
• Status: RESOLVED DUPLICATE

[Description Valery Kartel 2013-02-19 11:09:43 UTC]

Disable MPROTECT in executables to work properly on hardened profile.

Should have been done 100500 years ago

Reproducible: Always

[Comment 1 Valery Kartel 2013-02-19 11:11:54 UTC]

Created attachment 339358 [details]
clamav-0.97.6-r3.ebuild

[Comment 2 Valery Kartel 2013-02-19 11:15:48 UTC]

--- clamav-0.97.6-r2.ebuild     2013-02-16 01:31:01.000000000 +0200
+++ clamav-0.97.6-r3.ebuild     2013-02-19 12:28:23.369082883 +0200
@@ -13,12 +13,13 @@
 LICENSE="GPL-2"
 SLOT="0"
 KEYWORDS="alpha amd64 ~arm ~hppa ~ia64 ppc ppc64 sparc x86 ~x86-fbsd ~amd64-linux ~x86-linux ~ppc-macos ~sparc-solaris ~x86-solaris"
-IUSE="bzip2 clamdtop iconv ipv6 milter selinux static-libs uclibc"
+IUSE="bzip2 clamdtop iconv ipv6 hardened milter selinux static-libs uclibc"

 CDEPEND="bzip2? ( app-arch/bzip2 )
        clamdtop? ( sys-libs/ncurses )
        iconv? ( virtual/libiconv )
        milter? ( || ( mail-filter/libmilter mail-mta/sendmail ) )
+       hardened? ( sys-apps/paxctl )
        dev-libs/libtommath
        >=sys-libs/zlib-1.2.2
        sys-devel/libtool"
@@ -63,6 +64,13 @@
 src_install() {
        default

+       if use hardened; then
+               paxctl -cm "${ED}"/usr/sbin/clamd
+               paxctl -cm "${ED}"/usr/bin/clamconf
+               paxctl -cm "${ED}"/usr/bin/clamscan
+               paxctl -cm "${ED}"/usr/bin/freshclam
+       fi
+
        rm -rf "${ED}"/var/lib/clamav
        newinitd "${FILESDIR}"/clamd.initd-r2 clamd
        newconfd "${FILESDIR}"/clamd.conf clamd

[Comment 3 Anthony Basile 2013-02-19 17:43:19 UTC]

Please read my last comment on that bug.

*** This bug has been marked as a duplicate of bug 326199 ***