Anyone running chrooted bind-9.3.4+hardened+grsecurity?

I recently upgraded to bind-9.3.4 via portage, and it now
keeps core 
dumping on me.  Anyone running chrooted
bind-9.3.4+hardended+grsecurity 
having this problem?

Thanks,
Brian
-- 
gentoo-hardenedgentoo.org mailing list

* Brian A. Davis | 2007-02-19 11:15:36 [-0500]:

>I recently upgraded to bind-9.3.4 via portage, and it
now keeps core 
>dumping on me.  Anyone running chrooted
bind-9.3.4+hardended+grsecurity 
>having this problem?

Yes, me. Same thing. I backtrace it to a glibc function
(_*sig*
something). The core dump happend always after successfully
serving the
first request (w/o thread use flag). 
After downgrading to 9.3.2 it worked again. 9.3.4 worked
after
disabling SSP (-fstack-protector compiler flag). I don't
know whether
this is a gcc problem (3.4.6) or bind's but I'm going to
upgrade to
djdbns 


>Thanks,
>Brian
-- 
Regards
Sebastian Siewior
-- 
gentoo-hardenedgentoo.org mailing list

> I recently upgraded to bind-9.3.4 via portage, and it
now keeps core
> dumping on me.  Anyone running chrooted
> bind-9.3.4+hardended+grsecurity having this problem?
Yes, it also happens to non-chrooted bind.  This is bug
#158664. 
Basically, using -O instead of -O2 (gcc optimization) solved
it for me.

Akos

-- 
Akos Szalkai <szalkai2f.hu>
Principal IT Consultant, CISA
2F 2000 Szamitastechnikai es Szolgaltato Kft.
Tel: (+36-1)-4887700  Fax: (+36-1)-4887709  WWW: http://www.2f.hu/

-- 
gentoo-hardenedgentoo.org mailing list

Brian A. Davis wrote:
> I recently upgraded to bind-9.3.4 via portage, and it
now keeps core 
> dumping on me.  Anyone running chrooted 
> bind-9.3.4+hardended+grsecurity having this problem?
I've seen reports of this in the irc channel, but I've
upgraded all my 
servers and haven't had any issues.  Check you CFLAGS I
think I remember 
someone mentioning this.

C.
-- 
gentoo-hardenedgentoo.org mailing list

I had also seen this in the bug.  Do you know if there's a
way to 
specify per package CFLAG customizations in portage?

Also, does anyone know if this is being fixed on bind's end
of things?

Thanks,
Brian

Akos Szalkai wrote:
>> I recently upgraded to bind-9.3.4 via portage, and
it now keeps core
>> dumping on me.  Anyone running chrooted
>> bind-9.3.4+hardended+grsecurity having this
problem?
> Yes, it also happens to non-chrooted bind.  This is bug
#158664. 
> Basically, using -O instead of -O2 (gcc optimization)
solved it for me.
> 
> Akos
>
-- 
gentoo-hardenedgentoo.org mailing list

Brian Kroth wrote:
> I had also seen this in the bug.  Do you know if
there's a way to 
> specify per package CFLAG customizations in portage?
>
> Also, does anyone know if this is being fixed on bind's
end of things?
>
> Thanks,
> Brian
>
> Akos Szalkai wrote:
>>> I recently upgraded to bind-9.3.4 via portage,
and it now keeps core
>>> dumping on me.  Anyone running chrooted
>>> bind-9.3.4+hardended+grsecurity having this
problem?
>> Yes, it also happens to non-chrooted bind.  This is
bug #158664. 
>> Basically, using -O instead of -O2 (gcc
optimization) solved it for me.
>>
>> Akos
>>
I've done this on my laptop a few times, and am not too
familiar. But I 
have the file:
/etc/portage/env/dev-libs/beecrypt-3.1.0-r2
and the contents are:
CFLAGS="-O2 -march=pentium3 -pipe
-fomit-frame-pointer"
This is on a Pentium-M laptop, but it won't compiler unless
I set 
"march=pentium3". With this structure I've changed
march= for just the 
one version of the package. I've experimented with having an
unversioned 
package and it works, too. In this particular case, I now
have 
beecrypt-4.1.2-r1 and apparently it has compiled just fine
with my 
default "march=pentiumm". I believe it overrides
the whole CFLAGS 
environment variable, not piece by piece.

Dale Pontius
-- 
gentoo-hardenedgentoo.org mailing list

Thanks.  I've added a new post to the bug to show what I
did.

Brian

Dale E. Pontius wrote:
> Brian Kroth wrote:
>> I had also seen this in the bug.  Do you know if
there's a way to 
>> specify per package CFLAG customizations in
portage?
>>
>> Also, does anyone know if this is being fixed on
bind's end of things?
>>
>> Thanks,
>> Brian
>>
>> Akos Szalkai wrote:
>>>> I recently upgraded to bind-9.3.4 via
portage, and it now keeps core
>>>> dumping on me.  Anyone running chrooted
>>>> bind-9.3.4+hardended+grsecurity having this
problem?
>>> Yes, it also happens to non-chrooted bind. 
This is bug #158664. 
>>> Basically, using -O instead of -O2 (gcc
optimization) solved it for me.
>>>
>>> Akos
>>>
> I've done this on my laptop a few times, and am not too
familiar. But I 
> have the file:
> /etc/portage/env/dev-libs/beecrypt-3.1.0-r2
> and the contents are:
> CFLAGS="-O2 -march=pentium3 -pipe
-fomit-frame-pointer"
> This is on a Pentium-M laptop, but it won't compiler
unless I set 
> "march=pentium3". With this structure I've
changed march= for just the 
> one version of the package. I've experimented with
having an unversioned 
> package and it works, too. In this particular case, I
now have 
> beecrypt-4.1.2-r1 and apparently it has compiled just
fine with my 
> default "march=pentiumm". I believe it
overrides the whole CFLAGS 
> environment variable, not piece by piece.
> 
> Dale Pontius

-- 
************************************************************
*******************
Brian Kroth
Systems Administrator
UW Health Sciences Learning Center
750 Highland Avenue
Madison, WI  53705
608.261.1932
bpkrothwisc.edu
-- 
gentoo-hardenedgentoo.org mailing list