Re: [gentoo-hardened] Virtualbox-OSE PIE/PIC support

[pageexec@freemail.hu]

On 27 Jan 2010 at 1:58, Dariem Pérez Herrera wrote:

> Hello,
> I'm new in this list. Let me introduce myself: my name is Dariem, and
> I'm part of a team that is trying to create a distro based on project
> Gentoo Hardened. We want to collaborate  with you in everything we can.
> My first email will be about Virtualbox-OSE. I would like to know if
> there is any patch I can use to fix the problem with the inline asm
> using ebx register, but if it doesn't exist, I can try to create it
> myself and share it with you, I just don't want to duplicate efforts.
> Can you tell me what is the status of this issue?

while i haven't looked at the non-PIC in vbox, i can tell you that it's
only the tip of the iceberg, there're much more difficult problems there.
in particular, the kernel drivers are not compatible with PaX currently
and fixing them is anything but trivial (see http://www.virtualbox.org/ticket/941
and their in-house ring-0 module loader code among others).