Summary: | setfiles segfaults (problem in libselinux?) | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | Daniel Thaler <daniel> |
Component: | Hardened | Assignee: | The Gentoo Linux Hardened Team <hardened> |
Status: | RESOLVED TEST-REQUEST | ||
Severity: | normal | ||
Priority: | High | ||
Version: | unspecified | ||
Hardware: | x86 | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- | |
Attachments: | My setfiles.c with patch + printf |
Description
Daniel Thaler
2005-05-08 10:35:29 UTC
Created attachment 58369 [details]
My setfiles.c with patch + printf
Please try libselinux-1.22-r1, I believe it has the fix for your problem. As for debugging, you need to enable the gdb debugging in CFLAGS, and have portage not strip your binaries and librares. It works now. Thank you! As for debugging, I compiled the program manually with CFLAGS="-g". When setting breakpoints I got this type of error: Warning: Cannot insert breakpoint 1. Error accessing memory address 0x702: Input/output error. Anyway, I was wondering wether this is some weird side-effect of selinux/hardened or a genuine bug. Re comment #3 To properly debug something with USE=hardened enabled try the following # CFLAGS='-g3 -ggdb -fno-stack-protector -nopie' FEATURES='nostrip' emerge buggy $ paxctl -permsx `which buggy` ; (you may need to force selinux to this step?) $ gdb `which buggy` gdb> run gdb> backtrace full gdb> info regs etc.. good luck. |