pkg/51490: python (2.7) crashes running certbot unless PaX MPROTECT is disabled

[gcw%primenet.com.au@localhost]

>Number:         51490
>Category:       pkg
>Synopsis:       python (2.7) needs PaX MPROTECT disabled for some programs
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Sep 20 06:15:00 +0000 2016
>Originator:     gcw%primenet.com.au@localhost
>Release:        NetBSD 7.99.36
>Organization:
>Environment:
System: NetBSD g.primenet.com.au 7.99.36 NetBSD 7.99.36 (F) #4: Mon Sep 12 18:53:33 AEST 2016 gcw%g.primenet.com.au@localhost:/obj/OBJDIR64/sys/arch/amd64/compile/F amd64
Architecture: x86_64
Machine: amd64
>Description:
	Running certbot (security/py-cerbot) crashes python unless
	PaX mprotect is disabled.

	(Have not checked how well other python versions run).
>How-To-Repeat:
	Install certbot, get some certs and run "certbot renew".
>Fix:

Index: lang/python27/Makefile
===================================================================
RCS file: /cvsroot/pkgsrc/lang/python27/Makefile,v
retrieving revision 1.67
diff -u -r1.67 Makefile
--- lang/python27/Makefile	26 Jul 2016 16:45:33 -0000	1.67
+++ lang/python27/Makefile	20 Sep 2016 05:56:31 -0000
@@ -213,6 +213,8 @@
 
 BUILDLINK_DEPMETHOD.readline=		build
 
+NOT_PAX_MPROTECT_SAFE+=	bin/python2.7
+
 .include "../../archivers/bzip2/buildlink3.mk"
 .include "../../devel/gettext-lib/buildlink3.mk"
 .include "../../devel/libffi/buildlink3.mk"