Bug 558010

Summary:	=app-crypt/p11-kit-0.20.7 fails test on hardened kernel
Product:	Gentoo Linux	Reporter:	René Rhéaume <rene.rheaume>
Component:	[OLD] Library	Assignee:	Crypto team [DISABLED] <crypto+disabled>
Status:	RESOLVED WORKSFORME
Severity:	normal	CC:	alexander, alonbl, hardened
Priority:	Normal
Version:	unspecified
Hardware:	AMD64
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	build.log from emerge emerge --info output Kernel config dmesg output

Description René Rhéaume 2015-08-17 11:27:12 UTC

Many tests fails for p11-kit when an hardened kernel is in use. I don't know if it's because of bad PaX markings or some really nasty code.

Reproducible: Always

Steps to Reproduce:
1. FeATURES="test" emerge -1 p11-kit
2.
3.
Actual Results:  
 * ERROR: app-crypt/p11-kit-0.20.7::gentoo failed (test phase):
 *   Make check failed. See above for details.


Expected Results:  
p11-kit updated on system

Comment 1 René Rhéaume 2015-08-17 11:27:52 UTC

Created attachment 409238 [details]
build.log from emerge

Comment 2 René Rhéaume 2015-08-17 11:29:26 UTC

Created attachment 409240 [details]
emerge --info output

Comment 3 René Rhéaume 2015-08-17 11:36:01 UTC

Created attachment 409244 [details]
Kernel config

Comment 4 René Rhéaume 2015-08-17 11:38:47 UTC

Created attachment 409246 [details]
dmesg output

Comment 5 Alon Bar-Lev (RETIRED) gentoo-dev

2015-08-22 21:24:29 UTC

I am running pax and have no issue.

not sure what is this and how to resolve, does not seem directly related to p11-kit, but a generic issue.

---
grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0
---