public inbox for gentoo-embedded@lists.gentoo.org
 help / color / mirror / Atom feed
Search results ordered by [date|relevance]  view[summary|nested|Atom feed]
thread overview below | download: 
* Re: [gentoo-embedded] Problems migrating from uclibc to uclibc-ng
  @ 2016-12-21 12:06 99% ` Anthony G. Basile
  0 siblings, 0 replies; 1+ results
From: Anthony G. Basile @ 2016-12-21 12:06 UTC (permalink / raw
  To: gentoo-embedded

On 12/11/16 10:11 PM, René Rhéaume wrote:
> I am trying to migrate from uclibc to uclibc-ng.
> 
> First, I found 2 typos in the wiki  at
> https://wiki.gentoo.org/wiki/Project:Hardened_uClibc#Migration_to_uClibc-ng
> 
> cp -a /var/tmp/portage/sys-libs/uclibc-ng/image/lib /lib.new should be
> cp -a /var/tmp/portage/sys-libs/uclibc-ng-1.0.17/image/lib /lib.new
> 
> ls -al /lib/ld-uClibc.so.0 should be
> ls -al /lib/ld*-uClibc.so.0 to take in account 64-bit systems
> 
> 
> But now, I have several PAX errors, cannot start X or use GNU
> coreutils (that static busybox comes handy),as you can see below:
> 
> This is pedro.O (Linux x86_64 4.4.8-hardened-r1) 21:57:56
> 
> pedro login: drener
> [19640.729329] grsec: denied marking stack executable as requested by
> PT_GNU_STACK
> marking in /lib/libuClibc-0.1.0.19.so by /bin/login[login:13309] uid/euid:0/0
> gid/egid:0/0, parent /ginit[init:1] uid/euid:0/0 gid/egid:0/0
> Password:
> [19643.202924] grsec: denied marking stack executable as requested by
> PT_GNU_STACK
> marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/id[id:13310]
> uid/euid:1000/1000
> gid/egid:1000/1000, parent /ginit[ash:13309] uid/euid:1000/1000
> gid/egid:1000/1000
> [19643.215949] grsec: denied marking stack executable as requested by
> PT_GNU_STACK
> marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/id[id:13317]
> uid/euid:1000/1000
> gid/egid:1000/1000, parent /ginit[ash:13309] uid/euid:1000/1000
> gid/egid:1000/1000
> [19643.220535] grsec: denied marking stack executable as requested by
> PT_GNU_STACK
> marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/dircolors[dircolors:13318]
> uid/euid:1000/1000 gid/egid:1000/1000, parent /ginit[ash:13309]
> uid/euid:1000/1000
> gid/egid:1000/1000
> [19643.227779] grsec: denied marking stack executable as requested by
> PT_GNU_STACK
> marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/dircolors[dircolors:13319]
> uid/euid:1000/1000 gid/egid:1000/1000, parent /ginit[ash:13309]
> uid/euid:1000/1000
> gid/egid:1000/1000
> -ash: /home/drener/.bashrc: line 72: syntax error: bad function name
> 
> drener@l.pedro 2 ~
> $ startx
> [19645.530064] grsec: denied marking stack executable as requested by
> PT_GNU_STACK
> marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/startx[startx:13320]
> uid/euid:1000/1000 gid/egid:1000/1000, parent /ginit[ash:13309]
> uid/euid:1000/1000
> gid/egid:1000/1000
> 
> /bin/dash: symbol 'sigsetmask': can't resolve symbol
> 
> drener@l.pedro 255 ~
> $
> 
> I used the configuration file at
> https://gitweb.gentoo.org/proj/releng.git/tree/tools-uclibc/portage.amd64.hardened/savedconfig/sys-libs/uclibc-ng
> . And my kernel is configured to obey PaX flags from XATTR only. What
> is going on here?
> 

It looks like a couple of things.

First, can you run `readelf -l` on libuClibc-0.1.0.19.so and several
binaries that fail.

Second, dash seems broken for other reasons.  You may try to rebuild it.
 uclibc-ng most certainly provides sigsetmask.

-- 
Anthony G. Basile, Ph. D.
Chair of Information Technology
D'Youville College
Buffalo, NY 14201
(716) 829-8197


^ permalink raw reply	[relevance 99%]

Results 1-1 of 1 | reverse | options above
-- pct% links below jump to the message on this page, permalinks otherwise --
2016-12-12  3:11     [gentoo-embedded] Problems migrating from uclibc to uclibc-ng René Rhéaume
2016-12-21 12:06 99% ` Anthony G. Basile

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox