Re: [gentoo-hardened] apache ssl problems: PAX terminates execution attempt

["\"Tóth Attila\"" <atoth@atoth.sote.hu>]

2011.Április 17.(V) 13:20 időpontban Magnus Granberg ezt írta:
> söndag 17 april 2011 12.27.19 skrev  Tóth Attila:
>> 2011.Április 17.(V) 03:49 időpontban Alex Efros ezt írta:
>> > Hi!
>> >
>> > On Sun, Apr 17, 2011 at 02:17:21AM +0200, "Tóth Attila" wrote:
>> >> Reverting to the old binary makes the problem go away.
>> >
>> > Any chance it's as trivial as somehow modified old binary - like with
>> > paxctl?
>>
>> paxctl -m haven't solved the problem.
>>
>> > Also, you can try to use non-hardened gcc to build apache, just in
>> case.
>>
>> I would rather not use a non-hardened apache on the server. But I can
>> give
>> a try to compile it using a vanilla gcc profile.
>> Any of you successfully recompiled apache with a recent toolchain and
>> see
>> the ssl connections are working correctly?
>>
>> Thx:
>> Dw.
>>
>> > --
>> >
>> > 			WBR, Alex.
> Look at bug http://bugs.gentoo.org/show_bug.cgi?id=363443
> /Magnus

Compiling using gcc-4.5.2 with -O1 or switching to gcc-4.4.5 solves the
issue. Obviously it's not a solution.
I can provide binaries, but gcc cannot compile using -g ggdb in my case.

Thx for the tip. I add my comment to this bug.

Dw.
-- 
dr Tóth Attila, Radiológus, 06-20-825-8057
Attila Toth MD, Radiologist, +36-20-825-8057