From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from powerman.sky.net.ua (as-45-33.lns1-4c.kharkov.ukrtel.net [82.207.89.161])
	by robin.gentoo.org (8.13.4/8.13.4) with ESMTP id j53AP1AW027556
	for <gentoo-hardened@lists.gentoo.org>; Fri, 3 Jun 2005 10:25:02 GMT
Received: (qmail 26136 invoked by uid 1000); 3 Jun 2005 13:25:05 +0300
Date: Fri, 3 Jun 2005 13:25:05 +0300
From: Alex Efros <powerman@sky.net.ua>
To: gentoo-hardened@lists.gentoo.org
Subject: [gentoo-hardened] hardened & ati-drivers
Message-ID: <20050603102505.GA26783@home.power>
Mail-Followup-To: Alex Efros <powerman@sky.net.ua>,
	gentoo-hardened@lists.gentoo.org
Precedence: bulk
List-Post: <mailto:gentoo-hardened@lists.gentoo.org>
List-Help: <mailto:gentoo-hardened+help@gentoo.org>
List-Unsubscribe: <mailto:gentoo-hardened+unsubscribe@gentoo.org>
List-Subscribe: <mailto:gentoo-hardened+subscribe@gentoo.org>
List-Id: Gentoo Linux mail <gentoo-hardened.gentoo.org>
X-BeenThere: gentoo-hardened@gentoo.org
Reply-to: gentoo-hardened@lists.gentoo.org
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="82I3+IH0IqGh5yIs"
Content-Disposition: inline
Organization: asdfGroup Inc., http://www.asdfGroup.com/
User-Agent: Mutt/1.5.8i
X-Archives-Salt: c0417079-a6bb-408c-8fdc-d592156a1e46
X-Archives-Hash: 83a3d2cb1e819ddde6500c8160ea162b


--82I3+IH0IqGh5yIs
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Hi!

Am I right what only way to have TV-out working on my Radeon 9800 Pro is:

    gcc-config 5 && source /etc/profile		# switch to vanilla gcc
    cd /usr/src/linux && make && ...		# recompile 2.6.11-hardened-r13
						# with vanilla gcc (agpgart
						# should be enabled, dri
						# disabled)
    USE="-dlloader -hardened" emerge xorg-x11
    paxctl -pemrxs /usr/bin/X
    emerge ati-drivers
    gcc-config 1

As far as I understand this way Xorg will not be protected by PaX, PIE
and SSP, ati-drivers and kernel will not be protected by PIE and SSP.
Everything else, including all other X-clients, will be protected by PaX,
PIE and SSP.

I got TV-out working this way yesterday, but I dislike switching to
vanilla-gcc for these three because I must remember to continue
switching between hardened/vanilla gcc each time xorg-x11, ati-drivers
or kernel will be upgraded/recompiled... :(

-- 
			WBR, Alex.

--82I3+IH0IqGh5yIs
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFCoDABVItT6Fy+r6QRAop8AJ9R1XJycWGLDvM+lFbD9QrioObDmgCfXmnc
Nzk+Im4zTM2/oKs2rpDztcs=
=ohDJ
-----END PGP SIGNATURE-----

--82I3+IH0IqGh5yIs--
-- 
gentoo-hardened@gentoo.org mailing list