Re: [gentoo-hardened] mysql 4.1 requires shlib_t:file execmod?

[Antoine Martin <antoine@nagafix.co.uk>]

On Mon, 2005-10-24 at 23:23 +0200, pageexec@freemail.hu wrote:
> On 24 Oct 2005 at 20:15, Antoine Martin wrote:
> > But this is not the right way to do it, I admit this is only a very tiny
> > security risk, but I would much rather figure out a way to fix the
> > library to not require execmod. No other library requires it, and the
> > previous version of mysql I was using (4.0) didn't either.
> 
> indeed, the underlying reason is what we remedied, or so i
> thought so i'm all the more curious how you ended up with
> textrels again. fwiw, i can't find any DES related symbols
> in 4.1.14 and 5.0.13, so i'm wondering if it's USE flag
> dependent maybe (in which case mysql is probably statically
> linking a crypto library). what are yours?
USE="-X mysql sasl ipv6 nptl hardened"

dev-db/mysql-4.1.14  +berkdb -big-tables -cluster -debug -doc -extraengine -geometry -minimal +perl +readline +selinux +ssl -static +tcpd -utf8


Antoine

-- 
gentoo-hardened@gentoo.org mailing list