Haven't looked too closely at this, but I had to do paxctl -m /usr/bin/yelp in order for yelp to work. I'm expecting that someone else can reproduce this trivially by opening *any* help dialogue in GNOME 3, but if not I can provide more info.
Please attach your "emerge --info webkit-gtk yelp" output.
Created attachment 367106 [details] output of emerge --info webkit-gtk yelp
(In reply to Sean Santos from comment #2) > net-libs/webkit-gtk-2.0.4 was built with the following: > USE="geoloc gstreamer introspection libsecret spell test webgl (-aqua) -coverage -debug -jit" Interesting! You have webkit-gtk jit disabled, and I can't think of what else in yelp could hit mprotect. Unfortunately, I don't have a hardened system any more. Do you have any additional debugging information about where/why yelp is failing pax mprotect? For example, in the main code, in a specific library, etc.?
Does www-client/epiphany work when you emerge it with -jit? Or do you also need to manually paxctl mark it?
Ah, I forgot - this is the regex jit problem in webkit-gtk that we haven't fixed yet :/ *** This bug has been marked as a duplicate of bug 484300 ***
Created attachment 367110 [details] Backtrace printed after running yelp by hand with MPROTECT on Well, I just ran yelp by hand and got a core file with the attached backtrace. At first glance it looks like webkit-gtk still is using JIT even with -jit.
Ah, yes. Looks like this is the same from my backtrace.
