Mailing List Archive

Cannot istall java: pax-marking doesn't work properly with paxctl-ng
I've discovered, that I cannot install the latest java update. I use sun-jdk.
Emerge dies with an error message showing that binaries of the package
about to be installed aren't pax-marked properly.
It turns out, that java-vm-2.eclass will call pax-mark with -Cm flags on
amd64. While paxctl-ng will refuse to alter the binary with the -Cm
combination. I can -C first, and -m after that. But the two flags together
in a combination will cancel the operation.
Either the eclass should do it in two steps, or paxctl-ng binary must be
altered to handle this combination of flags (-Cm on amd64).
I'm using elfix-0.8.1 package.

Regards: Dw.
--
dr Tóth Attila, Radiológus, 06-20-825-8057
Attila Toth MD, Radiologist, +36-20-825-8057
Re: Cannot istall java: pax-marking doesn't work properly with paxctl-ng [ In reply to ]
On 02/07/2013 06:08 PM, "Tóth Attila" wrote:
> It turns out, that java-vm-2.eclass will call pax-mark with -Cm flags on

https://bugs.gentoo.org/show_bug.cgi?id=445948

I'm on it.

--
Anthony G. Basile, Ph. D.
Chair of Information Technology
D'Youville College
Buffalo, NY 14201
(716) 829-8197
Re: Cannot istall java: pax-marking doesn't work properly with paxctl-ng [ In reply to ]
Before reading the bug I modified the eclass exactly the same way how it
has been mentioned. And it solves the problem apart from the ongoing
discussion in the bug's thread.
--
dr Tóth Attila, Radiológus, 06-20-825-8057
Attila Toth MD, Radiologist, +36-20-825-8057

2013.Február 8.(P) 01:30 időpontban Anthony G. Basile ezt írta:
> On 02/07/2013 06:08 PM, "Tóth Attila" wrote:
>> It turns out, that java-vm-2.eclass will call pax-mark with -Cm flags on
>
> https://bugs.gentoo.org/show_bug.cgi?id=445948
>
> I'm on it.
>
> --
> Anthony G. Basile, Ph. D.
> Chair of Information Technology
> D'Youville College
> Buffalo, NY 14201
> (716) 829-8197
>
>
Re: Cannot istall java: pax-marking doesn't work properly with paxctl-ng [ In reply to ]
If you did the work upload the patch!

On 02/08/2013 01:07 AM, "Tóth Attila" wrote:
> Before reading the bug I modified the eclass exactly the same way how it
> has been mentioned. And it solves the problem apart from the ongoing
> discussion in the bug's thread.
>


--
Anthony G. Basile, Ph. D.
Chair of Information Technology
D'Youville College
Buffalo, NY 14201
(716) 829-8197
Re: Cannot istall java: pax-marking doesn't work properly with paxctl-ng [ In reply to ]
I'm too late as I see, but for the record I did this:
--- java-vm-2-original.eclass 2013-02-08 00:11:02.531340263 +0100
+++ java-vm-2-dwokfur.eclass 2013-02-08 00:12:34.260199247 +0100
@@ -279,8 +279,11 @@

# Ensure a PaX header is created.
local pax_markings="C"
+
+ pax-mark ${pax_markings} $(list-paxables "${executables[@]}")
+
# Usally disabeling MPROTECT is sufficent.
- local pax_markings+="m"
+ local pax_markings="m"
# On x86 for heap sizes over 700MB disable SEGMEXEC and PAGEEXEC
as well.
use x86 && pax_markings+="sp"

So duplicated the pax mark for a separate C and m. I doesn't take care of
the ze problem.

Dw.
--
dr Tóth Attila, Radiológus, 06-20-825-8057
Attila Toth MD, Radiologist, +36-20-825-8057

2013.Február 8.(P) 20:33 időpontban Anthony G. Basile ezt írta:
> If you did the work upload the patch!
>
> On 02/08/2013 01:07 AM, "Tóth Attila" wrote:
>> Before reading the bug I modified the eclass exactly the same way how it
>> has been mentioned. And it solves the problem apart from the ongoing
>> discussion in the bug's thread.
>>
>
>
> --
> Anthony G. Basile, Ph. D.
> Chair of Information Technology
> D'Youville College
> Buffalo, NY 14201
> (716) 829-8197
>
>