Bug#301163: libacl1: PT_GNU_STACK unnecessarily enabled on libacl.so.1 (fwd)

Nathan Scott <[email protected]> Thu, 24 Mar 2005 16:41:41 +1100
Newsgroups gmane.linux.file-systems.acl.devel
Message-ID <20050324054141.GK704@frodo>
Hi,

Anyone have any insight into what we might be doing wrong here?
This is a libacl.so built via just the usual acl Makefiles, and
libtool, etc.

thanks.

----- Forwarded message from Brad Spengler <[email protected]> -----

Date: Thu, 24 Mar 2005 00:22:51 -0500
To: Debian Bug Tracking System <[email protected]>
X-Mailer: reportbug 3.9
Reply-To: Brad Spengler <[email protected]>, [email protected]
From: Brad Spengler <[email protected]>
Subject: Bug#301163: libacl1: PT_GNU_STACK unnecessarily enabled on libacl.so.1

Package: libacl1
Version: 2.2.29-1
Severity: important



objdump -x reports:
   STACK off    0x00000000 vaddr 0x00000000 paddr 0x00000000 align 2**2
         filesz 0x00000000 memsz 0x00000000 flags rwx

This severely breaks PaX systems and effectively backdoors many
applications using exec-shield.  Other distributions have fixed these
issues of libraries being wrongly marked as requiring an executable
stack: look at Fedora or Gentoo for a solution.

-Brad

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.11.5-grsec
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages libacl1 depends on:
ii  libattr1                      2.4.21-1   Extended attribute shared library
ii  libc6                         2.3.4-1    GNU C Library: Shared libraries an

-- no debconf information


----- End forwarded message -----

-- 
Nathan

_______________________________________________
acl-devel mailing list
[email protected]
http://acl.bestbits.at/mailman/listinfo/acl-devel