Re: On GCL and libselinux

2019-05-09 Thread Jerry James
On Thu, May 9, 2019 at 3:23 AM Florian Weimer wrote: > I'm surprised that you can turn off ASLR for a running process. > Clearly, this can only be partially effective. I think the other bits > (adjusting the heap break) are what matters. You need to move that > initialization code into malloc it

Re: On GCL and libselinux

2019-05-09 Thread Florian Weimer
* Daniel P. Berrangé: > Though as Florian suggests, the better solution is to not have > the personality() call in main - have it called by malloc(), or > possibly a constructor function that's part of the object > providing the malloc replacement. The latter does not work because the ELF depend

Re: On GCL and libselinux

2019-05-09 Thread Daniel P . Berrangé
On Sun, May 05, 2019 at 06:49:30PM -0600, Jerry James wrote: > Awhile back, I mentioned that GCL was building in mock on my local > machine, but was segfaulting on the koji builders. By dint of much > experimentation, I now know what is going on. For the enlightenment > of anybody who cares: > >

Re: On GCL and libselinux

2019-05-09 Thread Florian Weimer
* Jerry James: > Awhile back, I mentioned that GCL was building in mock on my local > machine, but was segfaulting on the koji builders. By dint of much > experimentation, I now know what is going on. For the enlightenment > of anybody who cares: > > - GCL is linked with libtirpc. > - libtirpc i

Re: On GCL and libselinux

2019-05-08 Thread Jerry James
On Tue, May 7, 2019 at 3:12 PM Dominik 'Rathann' Mierzejewski wrote: > [snip excellent technical detective work] > > That was brilliant. Thanks for writing that up. > > I bet it would get a significant audience as an article on LWN. Might be > worth a try. Thanks! Now the question is whether I c

Re: On GCL and libselinux

2019-05-07 Thread Dominik 'Rathann' Mierzejewski
On Monday, 06 May 2019 at 02:49, Jerry James wrote: > Awhile back, I mentioned that GCL was building in mock on my local > machine, but was segfaulting on the koji builders. By dint of much > experimentation, I now know what is going on. For the enlightenment > of anybody who cares: [snip excelle

On GCL and libselinux

2019-05-05 Thread Jerry James
Awhile back, I mentioned that GCL was building in mock on my local machine, but was segfaulting on the koji builders. By dint of much experimentation, I now know what is going on. For the enlightenment of anybody who cares: - GCL is linked with libtirpc. - libtirpc is linked with libselinux. - l