Re: [gentoo-hardened] persistent paxctl -m?

2009-04-09 Thread Pavel Labushev
Alex Efros ?: > Hi! > > On Thu, Apr 09, 2009 at 07:14:11PM +0300, Alex Efros wrote: > >> and create executable shell script in that dir: mozilla-firefox-bin.postinst >> ---cut--- >> #!/bin/bash >> ewarn "Running chpax -m /opt/firefox/firefox-bin to avoid crash on flash!" >> chpax -m /opt/fir

Re: [gentoo-hardened] miro segfaults when PAX is not in softmode

2009-04-09 Thread Ned Ludd
On Wed, 2009-04-08 at 12:21 -0700, Grant wrote: > >> > in that case you have to use paxctl on the python interpreter, not > >> > the script. but before that it's better to find out why it crashes, > >> > so you should produce a coredump and analyze it. > >> > >> Thank you, I ran 'paxctl -m /usr/bin

[gentoo-hardened] Re: persistent paxctl -m?

2009-04-09 Thread 7v5w7go9ub0o
Ned Ludd wrote: ... firefox itself behaves. It's more likely he is using a plugin which does not. Ditto the above. No FF problems at all, compiling with the 4.33 overlay on AMD64.

Re: [gentoo-hardened] persistent paxctl -m?

2009-04-09 Thread Ned Ludd
On Thu, 2009-04-09 at 18:10 +0200, klondike wrote: > 2009/4/9 Grant : > > I seem to need to remember to paxctl -m the firefox binary whenever I > > upgrade firefox. This inevitably leads to a browser crash and lost > > time/info. Can I set up paxctl -m to persist, even if firefox is > > upgraded?

Re: [gentoo-hardened] persistent paxctl -m?

2009-04-09 Thread Alex Efros
Hi! On Thu, Apr 09, 2009 at 07:14:11PM +0300, Alex Efros wrote: > and create executable shell script in that dir: mozilla-firefox-bin.postinst > ---cut--- > #!/bin/bash > ewarn "Running chpax -m /opt/firefox/firefox-bin to avoid crash on flash!" > chpax -m /opt/firefox/firefox-bin > ---cut--- Of

Re: [gentoo-hardened] persistent paxctl -m?

2009-04-09 Thread Alex Efros
Hi! On Thu, Apr 09, 2009 at 09:07:39AM -0700, Grant wrote: > I seem to need to remember to paxctl -m the firefox binary whenever I > upgrade firefox. This inevitably leads to a browser crash and lost > time/info. Can I set up paxctl -m to persist, even if firefox is > upgraded? Put this into yo

Re: [gentoo-hardened] persistent paxctl -m?

2009-04-09 Thread Thomas Sachau
Grant schrieb: > I seem to need to remember to paxctl -m the firefox binary whenever I > upgrade firefox. This inevitably leads to a browser crash and lost > time/info. Can I set up paxctl -m to persist, even if firefox is > upgraded? > > - Grant > > paxctl works on a per-binary-base, with a n

Re: [gentoo-hardened] persistent paxctl -m?

2009-04-09 Thread klondike
2009/4/9 Grant : > I seem to need to remember to paxctl -m the firefox binary whenever I > upgrade firefox.  This inevitably leads to a browser crash and lost > time/info.  Can I set up paxctl -m to persist, even if firefox is > upgraded? You can't unless you modify the ebuilds as that info is stor

[gentoo-hardened] persistent paxctl -m?

2009-04-09 Thread Grant
I seem to need to remember to paxctl -m the firefox binary whenever I upgrade firefox. This inevitably leads to a browser crash and lost time/info. Can I set up paxctl -m to persist, even if firefox is upgraded? - Grant