Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 63885 - (PaX) mysql doesn't work with NOELFRELOCS enabled
Summary: (PaX) mysql doesn't work with NOELFRELOCS enabled
Status: RESOLVED DUPLICATE of bug 42968
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Hardened (show other bugs)
Hardware: All All
: High normal (vote)
Assignee: The Gentoo Linux Hardened Team
Depends on:
Reported: 2004-09-13 06:36 UTC by Andrei Ivanov
Modified: 2005-07-17 13:06 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description Andrei Ivanov 2004-09-13 06:36:01 UTC
resolveip: error while loading shared libraries: cannot make segment writable for relocation: Permission denied

It doesn't work not even after I disable every protection with 
chpax -pEmrxsv /usr/bin/resolveip

Trying to recompile mysql failed with:
./gen_lex_hash > lex_hash.h
./gen_lex_hash: error while loading shared libraries: cannot make segment writable for relocation: Permission denied

It also doesn't work after disabling all protections.

After disabling NOELFRELOCS, resolveip and gen_lex_hash work fine.

This happens with mysql-4.0.20-r1.

Portage 2.0.50-r11 (x86, gcc-3.3.4, glibc-, 2.6.7-hardened-r8)
System uname: 2.6.7-hardened-r8 i686 Celeron (Mendocino)
Gentoo Base System version 1.5.3
Autoconf: sys-devel/autoconf-2.59-r4
Automake: sys-devel/automake-1.8.5-r1
CFLAGS="-march=pentium2 -O3 -pipe -fomit-frame-pointer -ffast-math -fforce-addr -falign-functions=4 -ftracer -fstack-protector-all"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/share/config /var/qmail/alias /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-march=pentium2 -O3 -pipe -fomit-frame-pointer -ffast-math -fforce-addr -falign-functions=4 -ftracer -fstack-protector-all"
FEATURES="autoaddcvs autoload ccache sandbox sfperms strict"
USE="3dnow aalib acl acpi adns apache2 berkdb bzlib caps crypt curl curlwrappers dio exif fam flac ftp gd gmp gnutls hardened imagemagick imap java junit ldap mad maildir mailwrapper memlimit mhash mmap mmx ncurses nls nptl offensive oggvorbis pam pcntl pcre pic pie png posix readline samba selinux session shared sharedmem slang soap sockets socks5 speex sqlite sse ssl svg sysvipc tcpd theora tiff unicode usb vhosts wmf x86 xml xmlrpc zlib"
Comment 1 solar (RETIRED) gentoo-dev 2004-10-09 14:15:47 UTC
A patch would need to be developed for this and needs to be pushed upstream.
Comment 2 Brandon Hale (RETIRED) gentoo-dev 2004-12-02 06:52:44 UTC
Solar, this sounds more like NOTABUG to me. Most of us acknowledge that its still not the best idea to enable NOELFRELOCS for this reason, and I'm sure its documented multiple places. Reporter has unsupported kernel config and CFLAGS.
If you've confirmed textrel in a *supported* MySQL build and are interested in fixing it.. ignore me.
Comment 3 solar (RETIRED) gentoo-dev 2005-01-22 11:16:35 UTC
Resolving bug as UPSTREAM. Patch needed from them to correct this behavior.
Comment 4 solar (RETIRED) gentoo-dev 2005-05-16 17:56:54 UTC
reopening bug
Comment 5 solar (RETIRED) gentoo-dev 2005-05-16 17:57:09 UTC

*** This bug has been marked as a duplicate of 42968 ***