Re: XATTR_PAX, paxmark.sh, elog, icedtea, and maybe more

Karl-Johan Karlsson <creideiki+gentoo-hardened-p3ZhATDdJdqYedhux8xOaQ@public.gmane.org>
Newsgroups gmane.linux.gentoo.hardened
Organization Ferretporn
Message-ID <2812131.GtzgVrzNna@orley>
On Sat 13 Dec 2014 21.34.58 Rick Zero_Chaos Farina wrote:
> just to narrow it down, can you remove the ext3 modules (or just build
> it out of the kernel) and let the ext4 driver handle it?  ext4
> filesystem driver handles ext2 and ext3, typically with much better results.

Would you look at that - that actually solved the problem. I can now set 
XATTR_PAX flags markings on files in $PORTAGE_TMPDIR. Thanks!

I'll try to get around to setting up a VM with a bleeding-edge kernel to see 
if this behaviour is still present, and if so report it as a bug.

One weird thing I noticed was that even though (some of) the binaries have 
XATTR_PAX markings while in $PORTAGE_TMPDIR, none do after being merged to /:


# find /usr/lib64/icedtea7 -type f -name java | xargs -l paxctl-ng -v
/usr/lib64/icedtea7/bin/java:
        PT_PAX    : -em--
        XATTR_PAX : not found

/usr/lib64/icedtea7/jre/bin/java:
        PT_PAX    : -em--
        XATTR_PAX : not found


# cd $PORTAGE_TMPDIR && find . -type f -name java | xargs -l paxctl-ng -v
./dev-java/icedtea-7.2.5.3/work/icedtea-2.5.3/openjdk.build-boot/j2re-
image/bin/java:
        PT_PAX    : -em--
        XATTR_PAX : not found

./dev-java/icedtea-7.2.5.3/work/icedtea-2.5.3/openjdk.build-boot/bin/java:
        PT_PAX    : -em--
        XATTR_PAX : -em--

./dev-java/icedtea-7.2.5.3/work/icedtea-2.5.3/openjdk.build-boot/j2sdk-server-
image/bin/java:
        PT_PAX    : -em--
        XATTR_PAX : not found

./dev-java/icedtea-7.2.5.3/work/icedtea-2.5.3/openjdk.build-boot/j2sdk-server-
image/jre/bin/java:
        PT_PAX    : -em--
        XATTR_PAX : not found

./dev-java/icedtea-7.2.5.3/work/icedtea-2.5.3/openjdk.build-boot/j2sdk-
image/bin/java:
        open(O_RDWR) failed: cannot change PT_PAX flags
        PT_PAX    : -em--
        XATTR_PAX : -em--

./dev-java/icedtea-7.2.5.3/work/icedtea-2.5.3/openjdk.build-boot/j2sdk-
image/jre/bin/java:
        PT_PAX    : -em--
        XATTR_PAX : -em--

./dev-java/icedtea-7.2.5.3/work/icedtea-2.5.3/openjdk.build/bin/java:
        PT_PAX    : -em--
        XATTR_PAX : -em--

-- 
Karl-Johan Karlsson
signature.asc (application/pgp-signature, 181 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEABEIAAYFAlSNqCkACgkQAbrEtTMfrn03ZACfY4IgjVggOV25n0wssWBhGR4/
URUAniL9buJL2iBkWJpxyO0uhL/Az2yg
=2hEa
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.