Hi,

On 09:41 Wed 10 Nov     , Christopher Schwan wrote:
> I followed the instructions listed in number 6 of the following page: 
> http://www.gentoo.org/proj/en/hardened/gnu-stack.xml . However, the fix is 
> incomplete (some architectures still have executable stacks) and I had some 
> problems with BASH:
> 
> for i in $(find . -type f -name '*.asm') ; do
> 	echo $i >/dev/null
> 	cat >> $i <<-EOF
> 		#if defined(__linux__) && defined(__ELF__)
> 		.section .note.GNU-stack,"",%progbits
> 		#endif
> 	EOF
> done
> 
> If I remove the line with "echo" (which *should* be completely useless), the 
> cat command does not patch files - WHY ?! Also, mpir seemed to have dropped 
> yasm beginning with mpir-2.1 (?), so I think at least one loop in mpir's 
> ebuild is superfluous.

I will look into this.  What is the state for ppc and prefix ?  In
short: What keywords should we have on mpir?  I can only test ~amd64 and
~x86.

> > There are talk on sage-devel which is very close to mpir upstream
> > to take a different approach: using an m4 macro and a linker flag
> > to remove them -Wl,-z,noexecstack.
> 
> This seems to be a better idea.

Will that be available anytime soon?

Cheers,
Thomas



-- 
Thomas Kahle
http://dev.gentoo.org/~tomka/