[gentoo-commits] repo/gentoo:master commit in: net-firewall/ipset/

["Robin H. Johnson" <robbat2@gentoo.org>]

commit:     07380791d1f4739ba21be6bcc986b575c6fb8b27
Author:     Robin H. Johnson <robbat2 <AT> gentoo <DOT> org>
AuthorDate: Thu Nov 30 20:33:14 2017 +0000
Commit:     Robin H. Johnson <robbat2 <AT> gentoo <DOT> org>
CommitDate: Thu Nov 30 20:35:50 2017 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=07380791

net-firewall/ipset: block modules & CONFIG_PAX_CONSTIFY_PLUGIN

Closes: https://bugs.gentoo.org/614896
Package-Manager: Portage-2.3.16, Repoman-2.3.6
Signed-off-by: Robin H. Johnson <robbat2 <AT> gentoo.org>

 net-firewall/ipset/ipset-6.34.ebuild | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/net-firewall/ipset/ipset-6.34.ebuild b/net-firewall/ipset/ipset-6.34.ebuild
index 292b40eb05d..98a8e3e335b 100644
--- a/net-firewall/ipset/ipset-6.34.ebuild
+++ b/net-firewall/ipset/ipset-6.34.ebuild
@@ -36,6 +36,8 @@ pkg_setup() {
 	# It does still build without NET_NS, but it may be needed in future.
 	#CONFIG_CHECK="${CONFIG_CHECK} NET_NS"
 	#ERROR_NET_NS="ipset requires NET_NS (network namespace) support in your kernel."
+	CONFIG_CHECK+=" !PAX_CONSTIFY_PLUGIN"
+	ERROR_PAX_CONSTIFY_PLUGIN="ipset contains constified variables (#614896)"
 
 	build_modules=0
 	if use modules; then