neysx 06/04/25 10:39:05 Modified: prelink-howto.xml Log: Update from #130800
Revision Changes Path 1.38 xml/htdocs/doc/en/prelink-howto.xml file : http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/doc/en/prelink-howto.xml?rev=1.38&content-type=text/x-cvsweb-markup&cvsroot=gentoo plain: http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/doc/en/prelink-howto.xml?rev=1.38&content-type=text/plain&cvsroot=gentoo diff : http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/doc/en/prelink-howto.xml.diff?r1=1.37&r2=1.38&cvsroot=gentoo Index: prelink-howto.xml =================================================================== RCS file: /var/cvsroot/gentoo/xml/htdocs/doc/en/prelink-howto.xml,v retrieving revision 1.37 retrieving revision 1.38 diff -u -r1.37 -r1.38 --- prelink-howto.xml 6 Mar 2006 09:18:30 -0000 1.37 +++ prelink-howto.xml 25 Apr 2006 10:39:04 -0000 1.38 @@ -1,5 +1,5 @@ <?xml version='1.0' encoding="UTF-8"?> -<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/en/prelink-howto.xml,v 1.37 2006/03/06 09:18:30 neysx Exp $ --> +<!-- $Header: /var/cvsroot/gentoo/xml/htdocs/doc/en/prelink-howto.xml,v 1.38 2006/04/25 10:39:04 neysx Exp $ --> <!DOCTYPE guide SYSTEM "/dtd/guide.dtd"> <guide link="/doc/en/prelink-howto.xml"> <title>Gentoo Linux Prelink Guide</title> @@ -27,9 +27,8 @@ <license/> -<version>1.12</version> -<date>2005-04-21</date> - +<version>1.13</version> +<date>2006-04-21</date> <chapter> <title>Introduction</title> @@ -59,6 +58,13 @@ for a pre-linked executable. </p> +<warn> +Prelink will not work with Hardened Gentoo. This is because both projects try +to change the address space mapping of shared libraries. But prelink with the +-R option randomises library base addresses, providing some degree of hardened +protection. +</warn> + </body> </section> <section> @@ -137,12 +143,6 @@ <body> <p> -Next you should activate the "pic" USE flag in your <path>/etc/make.conf</path> -Don't forget to run <c>emerge --update --deep --newuse world</c> so that the USE -flag change is incorporated in your system. -</p> - -<p> Also make sure that you do <e>not</e> have -fPIC set in your CFLAGS/CXXFLAGS. If you do, you will need to rebuild your entire system without. </p> @@ -235,6 +235,20 @@ </body> </section> <section> +<title>Prelink Cron Job</title> +<body> + +<p> +<c>sys-devel/prelink-20060213</c> and later install a cron job in +<path>/etc/cron.daily/prelink</path>. To enable it, edit the configuration file +<path>/etc/conf.d/prelink</path>. This will run prelink daily in the +background, as needed, saving you running the command manually. +</p> + +</body> +</section> + +<section> <title>Speeding Up KDE After Prelinking</title> <body> @@ -256,7 +270,7 @@ <chapter> <title>Known Problems and Fixes</title> <section> -<title>"Cannot prelink against non-PIC shared library"</title> +<title>"Cannot prelink against non-PIC shared library"</title> <body> <p> @@ -277,6 +291,11 @@ The library in media-video/mjpegtools, <path>/usr/lib/liblavfile-1.6.so.0</path>. </li> + <li> + Nvidia OpenGl libraries, + <path>/usr/lib/opengl/nvidia/lib/libGL.so.*</path>. Due to performance + reasons they were compiled without PIC support. + </li> </ul> <p> @@ -297,7 +316,7 @@ </p> <p> -"I suppose the idea is that everything will be in the downloaded file, +"I suppose the idea is that everything will be in the downloaded file, so nothing depends on the local libraries on the target system. Unfortunately with Linux, and I think anything else using GLIBC, this still isn't quite true. There's this "libnss" (name service switch, some people seem to call it @@ -309,14 +328,14 @@ it is configured for each machine individually. The problem comes, I think, mainly from statically linking other GLIBC libraries, notably "libpthread", "libm", and "libc", from which come incompatible calls to "libnss" -functions." +functions." </p> </body> </section> <section> -<title>Prelink aborts with "prelink: dso.c:306: fdopen_dso: Assertion -`j == k' failed."</title> +<title>Prelink aborts with "prelink: dso.c:306: fdopen_dso: Assertion +`j == k' failed."</title> <body> <p> -- [email protected] mailing list
