[gentoo-hardened] PaX marking during build for mono & others

2013-05-14 Thread Alessandro Di Federico
Hi, currently several ebuilds sed some build scripts inject a paxctl call to mark the executable in various ways. However paxctl does not handle xattr marking, leading e.g. to bug #467238 [1]. pax-utils.eclass correctly handles this cases checking the PAX_MARKINGS variable. The pax-mark function sh

[gentoo-hardened] Proposal: ld.gold --rosegment

2016-01-27 Thread Alessandro Di Federico
rate everything would be useful too. -- Alessandro Di Federico [1] https://bugs.gentoo.org/show_bug.cgi?id=269315

Re: [gentoo-hardened] Proposal: ld.gold --rosegment

2016-01-29 Thread Alessandro Di Federico
y if the `+x` segment is 0x1000 bytes large. Or from another POV, `--rosegment` should force the `+x` segment to have page-sized dedicated area *in the file*. I'll try to come up with a patch for `ld.gold`. -- Alessandro Di Federico

Re: [gentoo-hardened] Proposal: ld.gold --rosegment

2016-01-29 Thread Alessandro Di Federico
On Fri, 29 Jan 2016 18:13:23 +0100 "PaX Team" wrote: > On 29 Jan 2016 at 16:44, Alessandro Di Federico wrote: > > > On Thu, 28 Jan 2016 02:49:46 +0100 > > "PaX Team" wrote: > > > nobody has ever shown that there exists such a bug (or set of >