darcs patch: libffi: backport incorrect detection of selinux

Sergei Trofimovich slyich at gmail.com
Tue Feb 8 22:52:23 CET 2011


1 patch for repository http://darcs.haskell.org/ghc:

Tue Feb  8 23:21:40 EET 2011  Sergei Trofimovich <slyfox at community.haskell.org>
  * libffi: backport incorrect detection of selinux
  
  This patch unbreaks ghci on GRSEC kernels hardened with
  TPE (Trusted Path Execution) protection.
  
  TPE forbids mmap('rwx') files opened for writes:
      fd = open (a_file_in_tmp, O_RDWR);
      mmap (...,               PROT_READ | PROT_WRITE | PROT_EXEC, fd);
  
  while allows anonymous RWX mappings:
      mmap (...MAP_ANONYMOUS , PROT_READ | PROT_WRITE | PROT_EXEC, -1);
  
  Thanks to klondike for finding it out.
  
  The result of a horrible typo.
  
  (unreleased yet) upstream also has the patch:
  
  http://github.com/atgreen/libffi/commit/eaf444eabc4c78703c0f98ac0197b1619c1b1bef
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: text/x-darcs-patch
Size: 82126 bytes
Desc: A darcs patch for your repository!
URL: <http://www.haskell.org/pipermail/cvs-ghc/attachments/20110208/acba8035/attachment-0001.bin>


More information about the Cvs-ghc mailing list