[gentoo-dev] Last rites: net-irc/srvx

2016-03-22 Thread Aaron Bauman
# Aaron Bauman  (19 Mar 2016)
# Unpatched security vulnerability per bug #521892.
# Masked for removal in 30 days.
net-irc/srvx

-- 
Cheers,
Aaron Bauman
Gentoo Linux Developer
GnuPG FP: 1536 F4B3 72EB 9C54 11F5  5C43 246D 23A2 10FB 0F3E

signature.asc
Description: This is a digitally signed message part.


Re: [gentoo-dev] Google API Go Client packages; slotting?

2016-03-22 Thread Andrew Udvare
On 21/03/16 02:27, Zac Medico wrote:
> Yeah, I know. Anyway, I went ahead and packaged it. Please try it out
> and file bugs if there's anything wrong:
> 
> https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f2ebd6535d66e0ba011c1a1beeb33df570dcff8d
> 
Works well, except on hardened I get this:

drive: error while loading shared libraries: cannot make segment
writable for relocation: Permission denied

strace output:

execve("/usr/bin/drive", ["drive"], [/* 59 vars */]) = 0
brk(0)  = 0x1b63e83750
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x3d6f913c000
access("/etc/ld.so.preload", R_OK)  = -1 ENOENT (No such file or
directory)
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=82250, ...}) = 0
mmap(NULL, 82250, PROT_READ, MAP_PRIVATE, 3, 0) = 0x3d6f911d000
close(3)= 0
open("/lib64/libpthread.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3,
"\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360`\0\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=133656, ...}) = 0
mmap(NULL, 2212496, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
0) = 0x3d6f8cf5000
mprotect(0x3d6f8d0d000, 2093056, PROT_NONE) = 0
mmap(0x3d6f8f0c000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x3d6f8f0c000
mmap(0x3d6f8f0e000, 12944, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3d6f8f0e000
close(3)= 0
open("/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3,
"\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\v\2\0\0\0\0\0"...,
832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=1730032, ...}) = 0
mmap(NULL, 3838936, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
0) = 0x3d6f8945000
mprotect(0x3d6f8ae5000, 2093056, PROT_NONE) = 0
mmap(0x3d6f8ce4000, 24576, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x19f000) = 0x3d6f8ce4000
mmap(0x3d6f8cea000, 17368, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3d6f8cea000
close(3)= 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x3d6f913b000
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x3d6f9135000
arch_prctl(ARCH_SET_FS, 0x3d6f9135740)  = 0
mprotect(0x3d6f8ce4000, 16384, PROT_READ) = 0
mprotect(0x3d6f8f0c000, 4096, PROT_READ) = 0

mprotect(0x1b617f6000, 12369920, PROT_READ|PROT_WRITE) = -1 EACCES
(Permission denied)

writev(2, [{"drive", 5}, {": ", 2}, {"error while loading shared
libra"..., 36}, {": ", 2}, {"", 0}, {"", 0}, {"cannot make segment
writable for"..., 43}, {": ", 2}, {"Permission denied", 17}, {"\n", 1}],
10drive: error while loading shared libraries: cannot make segment
writable for relocation: Permission denied
) = 108
exit_group(127) = ?
+++ exited with 127 +++



Re: [gentoo-dev] Google API Go Client packages; slotting?

2016-03-22 Thread Zac Medico
On 03/22/2016 12:33 AM, Andrew Udvare wrote:
> On 21/03/16 02:27, Zac Medico wrote:
>> Yeah, I know. Anyway, I went ahead and packaged it. Please try it out
>> and file bugs if there's anything wrong:
>>
>> https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f2ebd6535d66e0ba011c1a1beeb33df570dcff8d
>>
> Works well, except on hardened I get this:
> 
> drive: error while loading shared libraries: cannot make segment
> writable for relocation: Permission denied
> 
> strace output:
> 
> execve("/usr/bin/drive", ["drive"], [/* 59 vars */]) = 0
> brk(0)  = 0x1b63e83750
> mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
> = 0x3d6f913c000
> access("/etc/ld.so.preload", R_OK)  = -1 ENOENT (No such file or
> directory)
> open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
> fstat(3, {st_mode=S_IFREG|0644, st_size=82250, ...}) = 0
> mmap(NULL, 82250, PROT_READ, MAP_PRIVATE, 3, 0) = 0x3d6f911d000
> close(3)= 0
> open("/lib64/libpthread.so.0", O_RDONLY|O_CLOEXEC) = 3
> read(3,
> "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360`\0\0\0\0\0\0"...,
> 832) = 832
> fstat(3, {st_mode=S_IFREG|0755, st_size=133656, ...}) = 0
> mmap(NULL, 2212496, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
> 0) = 0x3d6f8cf5000
> mprotect(0x3d6f8d0d000, 2093056, PROT_NONE) = 0
> mmap(0x3d6f8f0c000, 8192, PROT_READ|PROT_WRITE,
> MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x3d6f8f0c000
> mmap(0x3d6f8f0e000, 12944, PROT_READ|PROT_WRITE,
> MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3d6f8f0e000
> close(3)= 0
> open("/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
> read(3,
> "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\v\2\0\0\0\0\0"...,
> 832) = 832
> fstat(3, {st_mode=S_IFREG|0755, st_size=1730032, ...}) = 0
> mmap(NULL, 3838936, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
> 0) = 0x3d6f8945000
> mprotect(0x3d6f8ae5000, 2093056, PROT_NONE) = 0
> mmap(0x3d6f8ce4000, 24576, PROT_READ|PROT_WRITE,
> MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x19f000) = 0x3d6f8ce4000
> mmap(0x3d6f8cea000, 17368, PROT_READ|PROT_WRITE,
> MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3d6f8cea000
> close(3)= 0
> mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
> = 0x3d6f913b000
> mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
> = 0x3d6f9135000
> arch_prctl(ARCH_SET_FS, 0x3d6f9135740)  = 0
> mprotect(0x3d6f8ce4000, 16384, PROT_READ) = 0
> mprotect(0x3d6f8f0c000, 4096, PROT_READ) = 0
> 
> mprotect(0x1b617f6000, 12369920, PROT_READ|PROT_WRITE) = -1 EACCES
> (Permission denied)
> 
> writev(2, [{"drive", 5}, {": ", 2}, {"error while loading shared
> libra"..., 36}, {": ", 2}, {"", 0}, {"", 0}, {"cannot make segment
> writable for"..., 43}, {": ", 2}, {"Permission denied", 17}, {"\n", 1}],
> 10drive: error while loading shared libraries: cannot make segment
> writable for relocation: Permission denied
> ) = 108
> exit_group(127) = ?
> +++ exited with 127 +++
> 

There's some information about this type of error here:

https://wiki.gentoo.org/wiki/Hardened/FAQ#I_keep_getting_the_message:_.22error_while_loading_shared_libraries:_cannot_make_segment_writable_for_relocation:_Permission_denied..22_What_does_this_mean.3F

Please file a bug, and we'll see about resolving it.
-- 
Thanks,
Zac