[prev in list] [next in list] [prev in thread] [next in thread] 

List:       gentoo-hardened
Subject:    Re: [gentoo-hardened] Running Skype on Hardened
From:       "Tóth Attila" <atoth () atoth ! sote ! hu>
Date:       2012-03-29 20:22:06
Message-ID: 18da04db95bf4140dc6405e4c6122fb2.squirrel () atoth ! sote ! hu
[Download RAW message or body]

BTW:
What is the current state of xt_pax compared to the initial announcement?
http://archives.gentoo.org/gentoo-dev/msg_4fc5b8e2bdd09f7394b23b44d944c4d7.xml
I see the new USE flag for hardened-sources. What should I expect upon
enabling it on a regular hardened system?
Can I help with testing? If yes: what should I do?

Regards:
Dw.
-- 
dr Tóth Attila, Radiológus, 06-20-825-8057
Attila Toth MD, Radiologist, +36-20-825-8057

2012.Március 29.(Cs) 21:52 időpontban PaX Team ezt írta:
> On 30 Mar 2012 at 20:12,   wrote:
>
>> On Thu, 29 Mar 2012, Sven Vermeulen wrote:
>>
>> >You can try to make it a valid ELF header first, and then paxmark it.
>> >
>> >I have the following for my Skype:
>> >paxctl -C /opt/skype/skype
>> >paxctl -me /opt/skype/skype
>>
>> I tried running paxctl -Cm on it (should be ran on install with
>> pax_kernel USE
>> flag), by it still reports an invalid ELF executable.
>
> because it is an invalid ELF (it reports sections headers but it doesn't
> seem to
> have any, or at least not where the ELF header says they should be).
> paxctl is not
> the only one that complains, try readelf or eu-elflint for similar
> results.
>
> as for the solution, you can try out the xattr control method that was
> written for
> cases like this.
>
>
>



[prev in list] [next in list] [prev in thread] [next in thread]