Package: diff Version: 2.8.1-9 Severity: minor The binaries appear to have been built without the PT_GNU_STACK header, which makes the 2.6.10 kernel enable read-implies-exec behaviour. This in turn causes problems under SELinux, because executable stacks are not typically allowed for legacy binaries.
$ execstack -q `which cmp diff` ? /usr/bin/cmp ? /usr/bin/diff It appears that rebuilding with a current toolchain is all that's required to work around this issue. I didn't have to do anything special under sid (i386), at least. $ gcc --version | head -1 gcc (GCC) 3.3.5 (Debian 1:3.3.5-6) $ execstack -q `which cmp diff` - /usr/bin/cmp - /usr/bin/diff I've set the severity to minor, since SELinux isn't currently integrated into Debian proper. Please let me know if you need any additional information. -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (990, 'unstable'), (101, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.11-rc1 Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Versions of packages diff depends on: ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]