Bug#301135: libc6: libacl/libcrypto/libasound all have PT_GNU_STACK enabled on them in glibc 2.3.4-1
- To: GOTO Masanori <gotom@debian.or.jp>
- Cc: 301135@bugs.debian.org, Brad Spengler <spender@grsecurity.net>, Daniel Jacobowitz <drow@false.org>
- Subject: Bug#301135: libc6: libacl/libcrypto/libasound all have PT_GNU_STACK enabled on them in glibc 2.3.4-1
- From: Zoran Dzelajlija <jelly@srce.hr>
- Date: Mon, 5 Sep 2005 00:59:05 +0200
- Message-id: <[🔎] 20050904225905.GA24320@islands.iskon.hr>
- Reply-to: Zoran Dzelajlija <jelly@srce.hr>, 301135@bugs.debian.org
- In-reply-to: <811x4pmn71.wl%gotom@debian.or.jp>
- References: <20050323234156.GA26329@nevyn.them.org> <20050323234839.GA6643@grsecurity.net> <20050324050443.GB911@nevyn.them.org> <20050324130414.GA25680@grsecurity.net> <20050324135906.GA22953@nevyn.them.org> <20050324144426.GA5915@grsecurity.net> <20050324153820.GA28255@nevyn.them.org> <81y8cc738f.wl@omega.webmasters.gr.jp> <20050817010612.GA21424@islands.iskon.hr> <811x4pmn71.wl%gotom@debian.or.jp>
Quoting GOTO Masanori (gotom@debian.or.jp):
> How did you fix your package?
These patches for PaX were applied:
debian/patches/902_glibc-2.3.5-pt_pax-1.dpatch
debian/patches/903_glibc-2.3.5-dl_execstack_PaX-2.dpatch
available in the diff at
http://debian.linux-systeme.com/dists/unstable/main/source/glibc_2.3.5-7.diff.gz
The second patch seems relevant, but I don't know if it would break
Exec-shield (which, as I understand it, PT_GNU_STACK was added to
support) or anything else. I'll try rebuilding glibc with just that
and see if it helps.
For complete PaX support, including the PT_PAX_FLAGS ELF header, it
seems a binutils patch is also needed.
Regards,
Zoran
Reply to: