From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1LMwqb-0005Xj-CX for garchives@archives.gentoo.org; Wed, 14 Jan 2009 03:55:17 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 7DA4DE0532; Wed, 14 Jan 2009 03:55:15 +0000 (UTC) Received: from homeless.linbsd.net (homeless.linbsd.net [64.127.112.66]) by pigeon.gentoo.org (Postfix) with ESMTP id 5E129E0532 for ; Wed, 14 Jan 2009 03:55:15 +0000 (UTC) Received: from [192.168.1.6] (dsl092-011-131.sfo1.dsl.speakeasy.net [66.92.11.131]) by homeless.linbsd.net (Postfix) with ESMTPA id F2EB5588D6 for ; Tue, 13 Jan 2009 19:55:14 -0800 (PST) Subject: Re: [gentoo-hardened] Which hardened kernel feature disables wine? From: Ned Ludd To: gentoo-hardened@lists.gentoo.org In-Reply-To: <49bf44f10901131919scb16680i8f9974efaaaf9afe@mail.gmail.com> References: <49bf44f10901131100t41a192d8n1d83ba116be42ce2@mail.gmail.com> <1231877371.14355.33.camel@hangover> <496CF942.8020202@gentoo.org> <49bf44f10901131306x3c6f9a41y5d0fdcefa3df4528@mail.gmail.com> <1231882201.14355.36.camel@hangover> <49bf44f10901131919scb16680i8f9974efaaaf9afe@mail.gmail.com> Content-Type: text/plain Date: Tue, 13 Jan 2009 19:55:13 -0800 Message-Id: <1231905314.4856.11.camel@localhost> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org Mime-Version: 1.0 X-Mailer: Evolution 2.22.3.1 Content-Transfer-Encoding: 7bit X-Archives-Salt: 6ea24683-7520-46dd-9a52-beaba32487cf X-Archives-Hash: 4a77bc7dd2a109c8a088a4cf01638ed1 On Tue, 2009-01-13 at 19:19 -0800, Grant wrote: > >> Thanks everyone, that worked great. Is there a way to get a list of > >> files which have been operated on by paxctl? I didn't see anything in > >> man paxctl. > > > > > > qlist -ao | scanelf -f - -q -x > > Thanks Ned. I get the following but I've only ever issued paxctl > referencing /usr/bin/wine-preloader. Can you tell me why the other > files might be listed? > > # qlist -ao | scanelf -f - -q -x > --mxe- /opt/emul-linux-x86-java-1.6.0.11/bin/java .. portage and or the toolchain handles them. Packages with known problems such as wine should be pax-marked See /usr/portage/eclass/pax-utils.eclass for more details. Finding pkgs that use these functions can be done like this. qgrep -Hvv 'pax-mark'