Re: gnutls vs. PAX MPROTECT on i386-current?

["John D. Baker" <jdbaker%mylinuxisp.com@localhost>]

On Tue, 4 Oct 2016, John D. Baker wrote:

> Also seen during build phase of "print/cups":
> 
> [...]
> Generating localization strings...
> /usr/pkg/lib/libgnutls.so.30: text relocations
> /usr/pkg/lib/libgnutls.so.30: Cannot write-enable text segment: Permission denied
> Makefile:241: recipe for target 'genstrings' failed
> gmake[1]: *** [genstrings] Error 1
> [...]
> 
> The local utilities:
> 
>   ${WRKSRC}/ppdc/genstrings
>   ${WRKSRC}/man/mantohtml
> 
> Need the 'paxctl +m' treatment on i386, at least (there's no problem
> on amd64).

The following patches allow "print/cups" to be built on i386-current.
Perhaps they should instead be SUBST blocks in the package Makefile so
they can be conditionalized.

+--- ppdc/Makefile.orig2	2016-11-28 20:33:13.317175985 -0600
++++ ppdc/Makefile	2016-11-28 20:32:17.658159354 -0600
+@@ -242,6 +242,7 @@ genstrings:		genstrings.o libcupsppdc.a 
+ 	$(CXX) $(ARCHFLAGS) $(LDFLAGS) -o genstrings genstrings.o \
+ 		libcupsppdc.a ../cups/$(LIBCUPSSTATIC) $(LIBGSSAPI) $(SSLLIBS) \
+ 		$(DNSSDLIBS) $(COMMONLIBS) $(LIBZ)
++	paxctl +m $@
+ 	echo Generating localization strings...
+ 	./genstrings >sample.c
+ 

+--- man/Makefile.orig	2016-06-14 12:45:32.000000000 -0500
++++ man/Makefile	2016-11-28 20:36:10.677421875 -0600
+@@ -225,7 +225,7 @@ mantohtml:	mantohtml.o ../cups/$(LIBCUPS
+ 	$(CC) $(ARCHFLAGS) $(LDFLAGS) -o $@ mantohtml.o \
+ 		../cups/$(LIBCUPSSTATIC) $(LIBGSSAPI) $(SSLLIBS) \
+ 		$(DNSSDLIBS) $(COMMONLIBS) $(LIBZ)
+-
++	paxctl +m $@
+ 
+ #
+ # End of "$Id: Makefile 12814 2015-07-30 15:03:33Z msweet $".

-- 
|/"\ John D. Baker, KN5UKS               NetBSD     Darwin/MacOS X
|\ / jdbaker[snail]mylinuxisp[flyspeck]com    OpenBSD            FreeBSD
| X  No HTML/proprietary data in email.   BSD just sits there and works!
|/ \ GPGkeyID:  D703 4A7E 479F 63F8 D3F4  BD99 9572 8F23 E4AD 1645