Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 182734 - Non-functioning python UNO bridge on default hardened install
Summary: Non-functioning python UNO bridge on default hardened install
Status: RESOLVED OBSOLETE
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Hardened (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: The Gentoo Linux Hardened Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-06-20 21:28 UTC by Attila Tóth
Modified: 2014-02-04 10:01 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Attila Tóth 2007-06-20 21:28:21 UTC
I've recently installed bibus, which would be an extremely important program for me to get rid of EndNote@windows.
I've succesfully set up bibus-1.2.0 on gentoo. I have openoffice-2.2.1 compiled using system's python. Python-2.4.4-r4 is compiled with ucs4. I have wxGTK-2.4.2, wxGTK-2.6.3.3 and wxpython-2.6.3.3 installed.
I've followed the documentation and successfully set up a MySQL database for bibus, which works fine. I've also used the macro shipped with bibus to activate UNO listening function.
Everytime I tried to connect to openoffice from bibus, the program hanged. If I used netstat, it showed, that the connection was established. I dig myself into openoffice pyuno config files and environment variables: finally I had PYTHONPATH and LD_LIBRARY_PATH exported everywhere one can imagine. If I try "import uno" and "import unohelper" I got no error messages. Systems logs showed nothing mentionable related to this problem.

I've ended up with a simple hello world pyuno program, which also hanged
just right after initiating the connection.

With the valuable help of Jörg Budischewski, I could further track down the problem.
It turned out, that if I boot a non-secured kernel python-UNO-bridge works fine. The next step was to determine which security option interacts badly with python-UNO. CONFIG_PAX_MPROTECT is guilty.
For those who want quick a workaround:
Paxctl userland tool can change the security settings on a per binary basis. Disabling MPROTECT on the python executable will provide a temporary fix at the expense of lowering the system's security measures.

Reproducible: Always

Steps to Reproduce: