Author: robert
Date: 2011-08-13 22:05:45 -0600 (Sat, 13 Aug 2011)
New Revision: 1641
Modified:
trunk/BOOK/chapter01/changelog.xml
trunk/BOOK/chapter03/patches.xml
trunk/BOOK/chapter05/binutils-pass1.xml
trunk/BOOK/chapter05/binutils-pass2.xml
trunk/BOOK/chapter05/glibc.xml
trunk/BOOK/chapter06/binutils.xml
trunk/BOOK/chapter06/glibc.xml
trunk/BOOK/general.ent
trunk/BOOK/patches.ent
Log:
Add PaX patches to Binutils and Glibc.
Modified: trunk/BOOK/chapter01/changelog.xml
===================================================================
--- trunk/BOOK/chapter01/changelog.xml 2011-08-14 01:29:17 UTC (rev 1640)
+++ trunk/BOOK/chapter01/changelog.xml 2011-08-14 04:05:45 UTC (rev 1641)
@@ -38,9 +38,18 @@
-->
<listitem>
- <para>2011-08-11</para>
+ <para>2011-08-14</para>
<itemizedlist>
<listitem>
+ <para>[robert] - Add PaX patches to Binutils and Glibc.</para>
+ </listitem>
+ </itemizedlist>
+ </listitem>
+
+ <listitem>
+ <para>2011-08-13</para>
+ <itemizedlist>
+ <listitem>
<para>[robert] - Use acl,user_xattr in /etc/fstab.</para>
</listitem>
</itemizedlist>
Modified: trunk/BOOK/chapter03/patches.xml
===================================================================
--- trunk/BOOK/chapter03/patches.xml 2011-08-14 01:29:17 UTC (rev 1640)
+++ trunk/BOOK/chapter03/patches.xml 2011-08-14 04:05:45 UTC (rev 1641)
@@ -27,6 +27,14 @@
</varlistentry>
<varlistentry>
+ <term>Binutils PT PaX Patch -
<token>&binutils-pt_pax-patch-size;</token>:</term>
+ <listitem>
+ <para>Download: <ulink
url="&patches-root;&binutils-pt_pax-patch;"/></para>
+ <para>MD5 sum: <literal>&binutils-pt_pax-patch-md5;</literal></para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
<term>Bzip2 Documentation Patch -
<token>&bzip2-docs-patch-size;</token>:</term>
<listitem>
<para>Download: <ulink url="&patches-root;&bzip2-docs-patch;"/></para>
@@ -122,14 +130,38 @@
</listitem>
</varlistentry>
- <varlistentry>
- <term>Grsecurity Kernel Patch -
<token>&grsecurity-patch-size;</token>:</term>
- <listitem>
- <para>Download: <ulink
url="http://grsecurity.net/stable/&grsecurity-patch;"/></para>
- <para>MD5 sum: <literal>&grsecurity-patch-md5;</literal></para>
+ <varlistentry>
+ <term>Glibc Dynamic Loader Execstack Patch -
<token>&glibc-dl_execstack-patch-size;</token>:</term>
+ <listitem>
+ <para>Download: <ulink
url="&patches-root;&glibc-dl_execstack-patch;"/></para>
+ <para>MD5 sum: <literal>&glibc-dl_execstack-patch-md5;</literal></para>
</listitem>
</varlistentry>
+ <varlistentry>
+ <term>Glibc Localdef Trampoline Patch -
<token>&glibc-localedef_trampoline-patch-size;</token>:</term>
+ <listitem>
+ <para>Download: <ulink
url="&patches-root;&glibc-localedef_trampoline-patch;"/></para>
+ <para>MD5 sum:
<literal>&glibc-localedef_trampoline-patch-md5;</literal></para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term>Glibc PT PaX Patch -
<token>&glibc-pt_pax-patch-size;</token>:</term>
+ <listitem>
+ <para>Download: <ulink
url="&patches-root;&glibc-pt_pax-patch;"/></para>
+ <para>MD5 sum: <literal>&glibc-pt_pax-patch-md5;</literal></para>
+ </listitem>
+ </varlistentry>
+
+ <varlistentry>
+ <term>Grsecurity Kernel Patch -
<token>&grsecurity-patch-size;</token>:</term>
+ <listitem>
+ <para>Download: <ulink
url="http://grsecurity.net/stable/&grsecurity-patch;"/></para>
+ <para>MD5 sum: <literal>&grsecurity-patch-md5;</literal></para>
+ </listitem>
+ </varlistentry>
+
<!--
<varlistentry>
<term>GRUB Disk Geometry Patch -
<token>&grub-geometry-patch-size;</token>:</term>
Modified: trunk/BOOK/chapter05/binutils-pass1.xml
===================================================================
--- trunk/BOOK/chapter05/binutils-pass1.xml 2011-08-14 01:29:17 UTC (rev
1640)
+++ trunk/BOOK/chapter05/binutils-pass1.xml 2011-08-14 04:05:45 UTC (rev
1641)
@@ -52,6 +52,10 @@
linker and assembler to determine which of their own features to
enable.</para>
+ <para>Add PT PaX elf header support to Binutils:</para>
+
+<screen><userinput remap="pre">patch -Np1 -i
../&binutils-pt_pax-patch;</userinput></screen>
+
<para>The Binutils documentation recommends building Binutils outside of
the
source directory in a dedicated build directory:</para>
Modified: trunk/BOOK/chapter05/binutils-pass2.xml
===================================================================
--- trunk/BOOK/chapter05/binutils-pass2.xml 2011-08-14 01:29:17 UTC (rev
1640)
+++ trunk/BOOK/chapter05/binutils-pass2.xml 2011-08-14 04:05:45 UTC (rev
1641)
@@ -43,6 +43,10 @@
<sect2 role="installation">
<title>Installation of Binutils</title>
+ <para>Add PT PaX elf header support to Binutils:</para>
+
+<screen><userinput remap="pre">patch -Np1 -i
../&binutils-pt_pax-patch;</userinput></screen>
+
<para>Create a separate build directory again:</para>
<screen><userinput remap="pre">mkdir -v ../binutils-build
Modified: trunk/BOOK/chapter05/glibc.xml
===================================================================
--- trunk/BOOK/chapter05/glibc.xml 2011-08-14 01:29:17 UTC (rev 1640)
+++ trunk/BOOK/chapter05/glibc.xml 2011-08-14 04:05:45 UTC (rev 1641)
@@ -47,6 +47,12 @@
<screen><userinput remap="pre">patch -Np1 -i
../&glibc-gcc_fix-patch;</userinput></screen>
+ <para>Add PaX support to Glibc:</para>
+
+<screen><userinput remap="pre">patch -Np1 -i ../&glibc-pt_pax-patch;
+patch -Np1 -i ../&glibc-dl_execstack-patch;
+patch -Np1 -i ../&glibc-localedef_trampoline-patch;</userinput></screen>
+
<para>The Glibc documentation recommends building Glibc outside of the
source
directory in a dedicated build directory:</para>
Modified: trunk/BOOK/chapter06/binutils.xml
===================================================================
--- trunk/BOOK/chapter06/binutils.xml 2011-08-14 01:29:17 UTC (rev 1640)
+++ trunk/BOOK/chapter06/binutils.xml 2011-08-14 04:05:45 UTC (rev 1641)
@@ -64,6 +64,10 @@
<screen><userinput remap="pre">rm -fv etc/standards.info
sed -i.bak '/^INFO/s/standards.info //' etc/Makefile.in</userinput></screen>
+ <para>Add PT PaX elf header support to Binutils:</para>
+
+<screen><userinput remap="pre">patch -Np1 -i
../&binutils-pt_pax-patch;</userinput></screen>
+
<para>The Binutils documentation recommends building Binutils outside of
the
source directory in a dedicated build directory:</para>
Modified: trunk/BOOK/chapter06/glibc.xml
===================================================================
--- trunk/BOOK/chapter06/glibc.xml 2011-08-14 01:29:17 UTC (rev 1640)
+++ trunk/BOOK/chapter06/glibc.xml 2011-08-14 04:05:45 UTC (rev 1641)
@@ -104,6 +104,12 @@
<para>The Glibc documentation recommends building Glibc outside of the
source
directory in a dedicated build directory:</para>
+ <para>Add PaX support to Glibc:</para>
+
+<screen><userinput remap="pre">patch -Np1 -i ../&glibc-pt_pax-patch;
+patch -Np1 -i ../&glibc-dl_execstack-patch;
+patch -Np1 -i ../&glibc-localedef_trampoline-patch;</userinput></screen>
+
<screen><userinput remap="pre">mkdir -v ../glibc-build
cd ../glibc-build</userinput></screen>
Modified: trunk/BOOK/general.ent
===================================================================
--- trunk/BOOK/general.ent 2011-08-14 01:29:17 UTC (rev 1640)
+++ trunk/BOOK/general.ent 2011-08-14 04:05:45 UTC (rev 1641)
@@ -1,5 +1,5 @@
-<!ENTITY version "SVN-20110813">
-<!ENTITY releasedate "August 13, 2011">
+<!ENTITY version "SVN-20110814">
+<!ENTITY releasedate "August 14, 2011">
<!ENTITY copyrightdate "1999-2011"><!-- jhalfs needs a literal dash, not
– -->
<!ENTITY milestone "1.0">
<!ENTITY generic-version "development"> <!-- Use "development", "testing", or
"x.y[-pre{x}]" -->
Modified: trunk/BOOK/patches.ent
===================================================================
--- trunk/BOOK/patches.ent 2011-08-14 01:29:17 UTC (rev 1640)
+++ trunk/BOOK/patches.ent 2011-08-14 04:05:45 UTC (rev 1641)
@@ -7,6 +7,11 @@
<!ENTITY bash-fixes-patch-size "6.1 KB">
+<!ENTITY binutils-pt_pax-patch "binutils-&binutils-version;-pt_pax-1.patch">
+<!ENTITY binutils-pt_pax-patch-md5 "5e87a88b33aa9348e28b5211f4f63cb5">
+<!ENTITY binutils-pt_pax-patch-size "12 KB">
+
+
<!ENTITY bzip2-docs-patch "bzip2-&bzip2-version;-install_docs-1.patch">
<!ENTITY bzip2-docs-patch-md5 "6a5ac7e89b791aae556de0f745916f7f">
<!ENTITY bzip2-docs-patch-size "1.6 KB">
@@ -64,10 +69,24 @@
<!ENTITY glibc-gcc_fix-patch-md5 "d1f28cb98acb9417fe52596908bbb9fd">
<!ENTITY glibc-gcc_fix-patch-size "2.5 KB">
+<!ENTITY glibc-dl_execstack-patch "glibc-&glibc-version;-dl_execstack-1.patch">
+<!ENTITY glibc-dl_execstack-patch-md5 "2b83e3803f94263132de8759ea1cb69a">
+<!ENTITY glibc-dl_execstack-patch-size "4 KB">
+
+<!ENTITY glibc-localedef_trampoline-patch
"glibc-&glibc-version;-localedef_trampoline-1.patch">
+<!ENTITY glibc-localedef_trampoline-patch-md5
"9234975544859ee20b54720e4eda5302">
+<!ENTITY glibc-localedef_trampoline-patch-size "4 KB">
+
+<!ENTITY glibc-pt_pax-patch "glibc-&glibc-version;-pt_pax-1.patch">
+<!ENTITY glibc-pt_pax-patch-md5 "9234975544859ee20b54720e4eda5302">
+<!ENTITY glibc-pt_pax-patch-size "4 KB">
+
+
<!ENTITY grsecurity-patch "grsecurity-2.2.2-2.6.32.44-201108091835.patch">
<!ENTITY grsecurity-patch-md5 "efcba6dc0505179c09fd697c62aa9582">
<!ENTITY grsecurity-patch-size "2.6 MB">
+
<!ENTITY grub-inode-patch "grub-&grub-version;-256byte_inode-1.patch">
<!ENTITY grub-inode-patch-md5 "2482bef9c1866b4045767a56268ba673">
<!ENTITY grub-inode-patch-size "4.8 KB">
--
http://linuxfromscratch.org/mailman/listinfo/hlfs-book
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page