519480 – net-firewall/ipt_netflow-2.0 - dropped -pax-const.patch

Bug 519480 - net-firewall/ipt_netflow-2.0 - dropped -pax-const.patch

Summary: net-firewall/ipt_netflow-2.0 - dropped -pax-const.patch

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Hardened (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	The Gentoo Linux Hardened Team

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2014-08-09 10:01 UTC by Jeroen Roovers (RETIRED)
Modified:	2014-08-19 07:22 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Jeroen Roovers (RETIRED) gentoo-dev

2014-08-09 10:01:12 UTC

The 1.8 patch seems largely incompatible with ipt_netflow 2.0. I tried a rewrite, but with no compatible kernel to test with, I quickly gave up. It would be nice to have a patch we can apply unconditionally, i.e. one that uses an arbitrary label with some #ifdefs.

Comment 1 Sergey Popov gentoo-dev

2014-08-19 07:22:24 UTC

+*ipt_netflow-2.0-r1 (19 Aug 2014)
+
+  19 Aug 2014; Sergey Popov <pinkbyte@gentoo.org> -ipt_netflow-2.0.ebuild,
+  +ipt_netflow-2.0-r1.ebuild, +files/ipt_netflow-2.0-pax-const.patch:
+  Revision bump: restore compatibility with hardened setups, wrt bug #519480,
+  add optional debugfs support. Drop old revision

Unfortunately, i am not sure how to implement this properly. But adapted patch is in tree now and it works quite well, so this can be fixed for now.