Package: diff
Version: 2.8.1-9
Severity: minor

The binaries appear to have been built without the PT_GNU_STACK header,
which makes the 2.6.10 kernel enable read-implies-exec behaviour.  This
in turn causes problems under SELinux, because executable stacks are not
typically allowed for legacy binaries.

   $ execstack -q `which cmp diff`
   ? /usr/bin/cmp
   ? /usr/bin/diff

It appears that rebuilding with a current toolchain is all that's
required to work around this issue.  I didn't have to do anything
special under sid (i386), at least.

   $ gcc --version | head -1
   gcc (GCC) 3.3.5 (Debian 1:3.3.5-6)
   $ execstack -q `which cmp diff`
   - /usr/bin/cmp
   - /usr/bin/diff


I've set the severity to minor, since SELinux isn't currently integrated
into Debian proper.  Please let me know if you need any additional
information.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (990, 'unstable'), (101, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.11-rc1
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages diff depends on:
ii  libc6                       2.3.2.ds1-20 GNU C Library: Shared libraries an

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to