From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1P9yP7-0001W1-Nf for garchives@archives.gentoo.org; Sun, 24 Oct 2010 11:06:22 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 8B3FBE08FE for ; Sun, 24 Oct 2010 11:06:19 +0000 (UTC) Received: from atoth.sote.hu (atoth.sote.hu [195.111.75.211]) by pigeon.gentoo.org (Postfix) with ESMTP id 07B3FE086D for ; Sun, 24 Oct 2010 10:18:56 +0000 (UTC) Received: from atoth.sote.hu (apache@localhost [127.0.0.1]) by atoth.sote.hu (8.14.4/8.14.4/atoth@atoth.sote.hu) with ESMTP id o9OAIoZt016633 for ; Sun, 24 Oct 2010 12:18:52 +0200 X-DKIM: Sendmail DKIM Filter v2.8.3 atoth.sote.hu o9OAIoZt016633 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=atoth.sote.hu; s=dwokfur; t=1287915535; bh=q8EBWb9HE3Q+ru7qD2QrqgKNxVdgq0vmnuQq5khh7Fc=; l=1487; h=Message-ID:In-Reply-To:References:Date:Subject:From:To: MIME-Version:Content-Type:Content-Transfer-Encoding; b=jBq/gnTkMXJvyDwtECjl+HS9oxTz+4xaC74Jse/NlJZ6S1Hhy+v+c2kjua6zjnTK5 c1ewdjABfv5RuUqB0BJ+Hxv0GwP7YkZ/vBBgX0fPSvFELx6DXIaxOMJXKF6xU8OIb3 0ziWjpdViSdaoC0GJR+wc/li8DIhUGZQdth+B8OM= X-DomainKeys: Sendmail DomainKeys Filter v1.0.2 atoth.sote.hu o9OAIoZt016633 DomainKey-Signature: a=rsa-sha1; s=dwokfur; d=atoth.sote.hu; c=nofws; q=dns; h=x-virus-status:x-virus-scanned:received:message-id: in-reply-to:references:date:subject:from:to:user-agent:mime-version: content-type:content-transfer-encoding:x-priority:importance: x-spam-status:x-spam-checker-version:x-list-milter:x-dcc-dcc1.aftenposten.no-metrics; b=M2NToCKgJxytgumvLZSEaRePxEXwb3Fd5XwvxEfNPwYT7RWuZIPgB9/uIQg7aOTdp tKmmvnMiwlkdNquwX8fAQxtKip1GKnvZguyKBWQDq1rTvXQ1YbN3A6NtEekkC9EzwV6 aXzz2psX2X5Bil4x5oaKstLp55R95T97GqupTO4= X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.96.3 at atoth Received: from 84.3.71.8 (SquirrelMail authenticated user atoth) by atoth.sote.hu with HTTP; Sun, 24 Oct 2010 12:18:52 +0200 Message-ID: <792c60d205c15fb9d7a7b60c90bd865c.squirrel@atoth.sote.hu> In-Reply-To: <4CC36EBF.9030801@gmail.com> References: <20090402222227.GM32102@home.power> <20090402230431.GN32102@home.power> <20101023122145.GD3696@home.power> <4CC31827.32254.283C970C@pageexec.freemail.hu> <20101023220728.GA4104@home.power> <4CC36EBF.9030801@gmail.com> Date: Sun, 24 Oct 2010 12:18:52 +0200 Subject: Re: [gentoo-hardened] 2.6.32-hardened-r9 to -r22 upgrade issue with PaX From: =?utf-8?B?IlTDs3RoIEF0dGlsYSI=?= To: gentoo-hardened@lists.gentoo.org User-Agent: SquirrelMail/1.4.21 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain;charset=utf-8 X-Priority: 3 (Normal) Importance: Normal X-Spam-Status: No, score=-101.6 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_40, USER_IN_WHITELIST autolearn=ham version=3.3.1 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on atoth.sote.hu X-List-Milter: local mail X-DCC-dcc1.aftenposten.no-Metrics: atoth; whitelist Content-Transfer-Encoding: quoted-printable X-Archives-Salt: 76a956d1-e49e-4047-9119-379f8e834a38 X-Archives-Hash: b2c922c64b0cd2a66a55cb287ce24690 2010.Okt=C3=B3ber 24.(V) 01:24 id=C5=91pontban klondike ezt =C3=ADrta: > El 24/10/10 00:07, Alex Efros escribi=C3=B3: >> Hi! >> >> Here is one more issue related to this kernel upgrade. This issue >> happens >> not only on these 4 servers, but even on my home workstation. This >> command: >> >> $ python2.6 -c 'from twisted.web import static' >> >> works ok on kernel 2.6.32-hardened-r9 and segfault on >> 2.6.32-hardened-r22 >> (you may need to `emerge dev-python/twisted-web` first). >> >> Also, command `emerge dev-python/twisted` works ok on -r9 and got this >> error while install stage on -r22 (there segfault for python2.6 record= ed >> in kernel log while executing emerge): >> >> ERROR: postinst >> ERROR: dev-python/twisted-9.0.0-r1 failed: >> failed with CPython 2.6 in update_plugin_cache() function >> >> Call stack: >> ebuild.sh, line 54: Called pkg_postinst >> environment, line 3369: Called python_execute_function '-q' >> 'update_plugin_cache' >> environment, line 3817: Called die >> >> Doing `paxctl -m /usr/bin/python2.6` works around this issue. >> > Yeah, python 2.6 uses a lot of ugly rwx mappings causing these kind of > bug. > > For exmaple python-UNO bridge works only after `paxctl -m`ing python... All runtime interpreters do ugly rwx things... http://www.youtube.com/watch?v=3DXHosLhPEN3k Regards: Dw. --=20 dr T=C3=B3th Attila, Radiol=C3=B3gus, 06-20-825-8057, 06-30-5962-962 Attila Toth MD, Radiologist, +36-20-825-8057, +36-30-5962-962