From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.50) id 1EUMKt-0007Es-FB for garchives@archives.gentoo.org; Tue, 25 Oct 2005 10:47:19 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.5/8.13.5) with SMTP id j9PAjgf9006159; Tue, 25 Oct 2005 10:45:42 GMT Received: from mail.nagafix.co.uk (mail.nagafix.co.uk [194.145.196.85]) by robin.gentoo.org (8.13.5/8.13.5) with ESMTP id j9PAjgNr020856 for ; Tue, 25 Oct 2005 10:45:42 GMT Received: by mail.nagafix.co.uk (Postfix, from userid 65534) id EED3BAEF82; Tue, 25 Oct 2005 17:51:24 +0100 (BST) Received: from localhost (localhost [127.0.0.1]) by mail.nagafix.co.uk (Postfix) with ESMTP id 428E7AEF83 for ; Tue, 25 Oct 2005 17:51:24 +0100 (BST) Received: from mail.nagafix.co.uk ([127.0.0.1]) by localhost (viper.nagafix.co.uk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 30827-06 for ; Tue, 25 Oct 2005 17:51:22 +0100 (BST) Received: from [192.168.22.249] (angel.hildebrand.co.uk [81.91.99.6]) by mail.nagafix.co.uk (Postfix) with ESMTP id 2C487AEF82 for ; Tue, 25 Oct 2005 17:51:22 +0100 (BST) Subject: Re: [gentoo-hardened] mysql 4.1 requires shlib_t:file execmod? From: Antoine Martin To: gentoo-hardened@lists.gentoo.org In-Reply-To: <435D84D9.26102.B0B60317@pageexec.freemail.hu> References: <435D6D0E.27558.B0591158@pageexec.freemail.hu> <435D84D9.26102.B0B60317@pageexec.freemail.hu> Content-Type: text/plain Organization: Nagafix Ltd Date: Tue, 25 Oct 2005 11:45:37 +0100 Message-Id: <1130237137.10477.5.camel@localhost.localdomain> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org Mime-Version: 1.0 X-Mailer: Evolution 2.2.3 (2.2.3-2.fc4) Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at viper.nagafix.co.uk X-Spam-Checker-Version: SpamAssassin 3.0.4-gr0 (2005-06-05) on viper.nagafix.co.uk X-Spam-Level: X-Spam-Status: No, score=0.5 required=5.0 tests=AWL,DATE_IN_PAST_06_12 autolearn=no version=3.0.4-gr0 X-Archives-Salt: af5d59a9-7f57-4a99-a6ab-3ba720183f6b X-Archives-Hash: c47f53e87fd5d3e1caa5254ab250119b On Tue, 2005-10-25 at 01:05 +0200, pageexec@freemail.hu wrote: > On 24 Oct 2005 at 22:29, Antoine Martin wrote: > > USE="-X mysql sasl ipv6 nptl hardened" > > > > dev-db/mysql-4.1.14 +berkdb -big-tables -cluster -debug -doc -extraengine > > -geometry -minimal +perl +readline +selinux +ssl -static +tcpd -utf8 > > ok, mine's exactly the same except for +selinux (no selinux here). > so it's either that or the hardened toolchain that causes this, > although i don't see from the ebuild nor from the toolchain how > that extra crypto enters the picture. anyone has ideas? also, can > you try to emerge it without selinux and/or the hardened toolchain > (set gcc-config to the normal specs file) and see what happens? Sure. But how do I do that? (good thing that box is not a proper live one!) > if > that cures it, comparing compile/emerge logs might shed a light on > this. Also, do you know how I can contribute some selinux policy files to gentoo? Thanks Antoine -- gentoo-hardened@gentoo.org mailing list