From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1LMwID-0000qR-76 for garchives@archives.gentoo.org; Wed, 14 Jan 2009 03:19:49 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id E7006E07C9; Wed, 14 Jan 2009 03:19:41 +0000 (UTC) Received: from fk-out-0910.google.com (fk-out-0910.google.com [209.85.128.185]) by pigeon.gentoo.org (Postfix) with ESMTP id 7AA3FE07C9 for ; Wed, 14 Jan 2009 03:19:41 +0000 (UTC) Received: by fk-out-0910.google.com with SMTP id 18so203860fks.2 for ; Tue, 13 Jan 2009 19:19:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:references; bh=nNHIUMfNRIJaLJK1M5g56eyhdPmANraSqw+wIl4Kdso=; b=C3ho66ggrfMQwKmaYFIxftEaliw4ouAX1gzB2D9OmQP52fxzzWyELfzZX7BlnqJY+t R44k9Rfs0WABGK/Xag/PntzPLGjEexrCyMRdSXTB0m9RngU4vnrJqJCL/6wbaqtWoGvn ysBVIFMoNpZbsI9csZNZwriJl4HXWXnHN2YaI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :references; b=IMuj+/e3eWBszm+TkrOP4VGZLt/AunqdWyRa4dA1SRGj36fvO44PDNc7yEA2b2SGsr jEJgCN8feGppXLhQFfxNWhNCBbPxqG1ws3Gs3WxFhNuhRpAXlUD/Y/LGiUbv+6M5u6Xq yKa+SbSfTGlKE6DB3O8GMtBaGGzZ03a5RAorU= Received: by 10.181.134.12 with SMTP id l12mr11623062bkn.80.1231903179966; Tue, 13 Jan 2009 19:19:39 -0800 (PST) Received: by 10.181.16.3 with HTTP; Tue, 13 Jan 2009 19:19:39 -0800 (PST) Message-ID: <49bf44f10901131919scb16680i8f9974efaaaf9afe@mail.gmail.com> Date: Tue, 13 Jan 2009 19:19:39 -0800 From: Grant To: gentoo-hardened@lists.gentoo.org Subject: Re: [gentoo-hardened] Which hardened kernel feature disables wine? In-Reply-To: <1231882201.14355.36.camel@hangover> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <49bf44f10901131100t41a192d8n1d83ba116be42ce2@mail.gmail.com> <1231877371.14355.33.camel@hangover> <496CF942.8020202@gentoo.org> <49bf44f10901131306x3c6f9a41y5d0fdcefa3df4528@mail.gmail.com> <1231882201.14355.36.camel@hangover> X-Archives-Salt: b175d1f6-353c-49e9-a8cc-31c31a1ae84b X-Archives-Hash: 4898ac6a47f4aacd2bdfd3f3b2fede62 >> Thanks everyone, that worked great. Is there a way to get a list of >> files which have been operated on by paxctl? I didn't see anything in >> man paxctl. > > > qlist -ao | scanelf -f - -q -x Thanks Ned. I get the following but I've only ever issued paxctl referencing /usr/bin/wine-preloader. Can you tell me why the other files might be listed? # qlist -ao | scanelf -f - -q -x --mxe- /opt/emul-linux-x86-java-1.6.0.11/bin/java --mxe- /opt/emul-linux-x86-java-1.6.0.11/bin/keytool --mxe- /opt/emul-linux-x86-java-1.6.0.11/bin/policytool --mxe- /opt/emul-linux-x86-java-1.6.0.11/bin/rmiregistry --mxe- /opt/emul-linux-x86-java-1.6.0.11/bin/rmid --mxe- /opt/emul-linux-x86-java-1.6.0.11/bin/tnameserv --mxe- /opt/emul-linux-x86-java-1.6.0.11/bin/orbd --mxe- /opt/emul-linux-x86-java-1.6.0.11/bin/servertool --mxe- /opt/emul-linux-x86-java-1.6.0.11/bin/unpack200 --mxe- /opt/emul-linux-x86-java-1.6.0.11/bin/pack200 --mxe- /opt/emul-linux-x86-java-1.6.0.11/bin/java_vm --mxe- /opt/emul-linux-x86-java-1.6.0.11/bin/javaws --mxe- /opt/VirtualBox/VBoxHeadless --mxe- /opt/VirtualBox/VBoxManage --mxe- /opt/VirtualBox/VBoxSDL --mxe- /opt/VirtualBox/VBoxSVC --mxe- /opt/VirtualBox/VBoxTunctl --mxe- /opt/VirtualBox/VBoxXPCOMIPCD --mxe- /opt/VirtualBox/VirtualBox --mxe- /usr/bin/wine-preloader --mxe- /opt/sun-jdk-1.6.0.11/bin/apt --mxe- /opt/sun-jdk-1.6.0.11/bin/jar --mxe- /opt/sun-jdk-1.6.0.11/bin/jdb --mxe- /opt/sun-jdk-1.6.0.11/bin/jps --mxe- /opt/sun-jdk-1.6.0.11/bin/xjc --mxe- /opt/sun-jdk-1.6.0.11/bin/idlj --mxe- /opt/sun-jdk-1.6.0.11/bin/java --mxe- /opt/sun-jdk-1.6.0.11/bin/jhat --mxe- /opt/sun-jdk-1.6.0.11/bin/jmap --mxe- /opt/sun-jdk-1.6.0.11/bin/orbd --mxe- /opt/sun-jdk-1.6.0.11/bin/rmic --mxe- /opt/sun-jdk-1.6.0.11/bin/rmid --mxe- /opt/sun-jdk-1.6.0.11/bin/wsimport --mxe- /opt/sun-jdk-1.6.0.11/bin/serialver --mxe- /opt/sun-jdk-1.6.0.11/bin/extcheck --mxe- /opt/sun-jdk-1.6.0.11/bin/keytool --mxe- /opt/sun-jdk-1.6.0.11/bin/javac --mxe- /opt/sun-jdk-1.6.0.11/bin/javah --mxe- /opt/sun-jdk-1.6.0.11/bin/javap --mxe- /opt/sun-jdk-1.6.0.11/bin/jinfo --mxe- /opt/sun-jdk-1.6.0.11/bin/jstat --mxe- /opt/sun-jdk-1.6.0.11/bin/wsgen --mxe- /opt/sun-jdk-1.6.0.11/bin/unpack200 --mxe- /opt/sun-jdk-1.6.0.11/bin/native2ascii --mxe- /opt/sun-jdk-1.6.0.11/bin/appletviewer --mxe- /opt/sun-jdk-1.6.0.11/bin/schemagen --mxe- /opt/sun-jdk-1.6.0.11/bin/jrunscript --mxe- /opt/sun-jdk-1.6.0.11/bin/jstack --mxe- /opt/sun-jdk-1.6.0.11/bin/jstatd --mxe- /opt/sun-jdk-1.6.0.11/bin/tnameserv --mxe- /opt/sun-jdk-1.6.0.11/bin/servertool --mxe- /opt/sun-jdk-1.6.0.11/bin/jarsigner --mxe- /opt/sun-jdk-1.6.0.11/bin/pack200 --mxe- /opt/sun-jdk-1.6.0.11/bin/jsadebugd --mxe- /opt/sun-jdk-1.6.0.11/bin/javadoc --mxe- /opt/sun-jdk-1.6.0.11/bin/rmiregistry --mxe- /opt/sun-jdk-1.6.0.11/bin/policytool --mxe- /opt/sun-jdk-1.6.0.11/bin/jconsole --mxe- /opt/sun-jdk-1.6.0.11/jre/bin/java --mxe- /opt/sun-jdk-1.6.0.11/jre/bin/orbd --mxe- /opt/sun-jdk-1.6.0.11/jre/bin/rmid --mxe- /opt/sun-jdk-1.6.0.11/jre/bin/keytool --mxe- /opt/sun-jdk-1.6.0.11/jre/bin/unpack200 --mxe- /opt/sun-jdk-1.6.0.11/jre/bin/tnameserv --mxe- /opt/sun-jdk-1.6.0.11/jre/bin/servertool --mxe- /opt/sun-jdk-1.6.0.11/jre/bin/pack200 --mxe- /opt/sun-jdk-1.6.0.11/jre/bin/rmiregistry --mxe- /opt/sun-jdk-1.6.0.11/jre/bin/policytool - Grant