* Re: [gentoo-embedded] Problems migrating from uclibc to uclibc-ng
@ 2016-12-21 12:06 99% ` Anthony G. Basile
0 siblings, 0 replies; 1+ results
From: Anthony G. Basile @ 2016-12-21 12:06 UTC (permalink / raw
To: gentoo-embedded
On 12/11/16 10:11 PM, René Rhéaume wrote:
> I am trying to migrate from uclibc to uclibc-ng.
>
> First, I found 2 typos in the wiki at
> https://wiki.gentoo.org/wiki/Project:Hardened_uClibc#Migration_to_uClibc-ng
>
> cp -a /var/tmp/portage/sys-libs/uclibc-ng/image/lib /lib.new should be
> cp -a /var/tmp/portage/sys-libs/uclibc-ng-1.0.17/image/lib /lib.new
>
> ls -al /lib/ld-uClibc.so.0 should be
> ls -al /lib/ld*-uClibc.so.0 to take in account 64-bit systems
>
>
> But now, I have several PAX errors, cannot start X or use GNU
> coreutils (that static busybox comes handy),as you can see below:
>
> This is pedro.O (Linux x86_64 4.4.8-hardened-r1) 21:57:56
>
> pedro login: drener
> [19640.729329] grsec: denied marking stack executable as requested by
> PT_GNU_STACK
> marking in /lib/libuClibc-0.1.0.19.so by /bin/login[login:13309] uid/euid:0/0
> gid/egid:0/0, parent /ginit[init:1] uid/euid:0/0 gid/egid:0/0
> Password:
> [19643.202924] grsec: denied marking stack executable as requested by
> PT_GNU_STACK
> marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/id[id:13310]
> uid/euid:1000/1000
> gid/egid:1000/1000, parent /ginit[ash:13309] uid/euid:1000/1000
> gid/egid:1000/1000
> [19643.215949] grsec: denied marking stack executable as requested by
> PT_GNU_STACK
> marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/id[id:13317]
> uid/euid:1000/1000
> gid/egid:1000/1000, parent /ginit[ash:13309] uid/euid:1000/1000
> gid/egid:1000/1000
> [19643.220535] grsec: denied marking stack executable as requested by
> PT_GNU_STACK
> marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/dircolors[dircolors:13318]
> uid/euid:1000/1000 gid/egid:1000/1000, parent /ginit[ash:13309]
> uid/euid:1000/1000
> gid/egid:1000/1000
> [19643.227779] grsec: denied marking stack executable as requested by
> PT_GNU_STACK
> marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/dircolors[dircolors:13319]
> uid/euid:1000/1000 gid/egid:1000/1000, parent /ginit[ash:13309]
> uid/euid:1000/1000
> gid/egid:1000/1000
> -ash: /home/drener/.bashrc: line 72: syntax error: bad function name
>
> drener@l.pedro 2 ~
> $ startx
> [19645.530064] grsec: denied marking stack executable as requested by
> PT_GNU_STACK
> marking in /lib/libuClibc-0.1.0.19.so by /usr/bin/startx[startx:13320]
> uid/euid:1000/1000 gid/egid:1000/1000, parent /ginit[ash:13309]
> uid/euid:1000/1000
> gid/egid:1000/1000
>
> /bin/dash: symbol 'sigsetmask': can't resolve symbol
>
> drener@l.pedro 255 ~
> $
>
> I used the configuration file at
> https://gitweb.gentoo.org/proj/releng.git/tree/tools-uclibc/portage.amd64.hardened/savedconfig/sys-libs/uclibc-ng
> . And my kernel is configured to obey PaX flags from XATTR only. What
> is going on here?
>
It looks like a couple of things.
First, can you run `readelf -l` on libuClibc-0.1.0.19.so and several
binaries that fail.
Second, dash seems broken for other reasons. You may try to rebuild it.
uclibc-ng most certainly provides sigsetmask.
--
Anthony G. Basile, Ph. D.
Chair of Information Technology
D'Youville College
Buffalo, NY 14201
(716) 829-8197
^ permalink raw reply [relevance 99%]
Results 1-1 of 1 | reverse | options above
-- pct% links below jump to the message on this page, permalinks otherwise --
2016-12-12 3:11 [gentoo-embedded] Problems migrating from uclibc to uclibc-ng René Rhéaume
2016-12-21 12:06 99% ` Anthony G. Basile
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox