commit: b793e3ad0d62a2f6c20c10e62a87acbde69cd91b
Author: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Mon Jun 8 19:36:11 2015 +0000
Commit: Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Mon Jun 8 19:36:11 2015 +0000
URL: https://gitweb.gentoo.org/proj/hardened-dev.git/commit/?id=b793e3ad
sys-apps/sandbox: handle musl-1.1.10's PROTECTED visibility symbols.
.../files/sandbox-2.6-include-PROTECTED-symbols.patch | 12 ++++++++++++
sys-apps/sandbox/sandbox-2.6-r999.ebuild | 1 +
2 files changed, 13 insertions(+)
diff --git a/sys-apps/sandbox/files/sandbox-2.6-include-PROTECTED-symbols.patch
b/sys-apps/sandbox/files/sandbox-2.6-include-PROTECTED-symbols.patch
new file mode 100644
index 0000000..cb29a6c
--- /dev/null
+++ b/sys-apps/sandbox/files/sandbox-2.6-include-PROTECTED-symbols.patch
@@ -0,0 +1,12 @@
+diff -Naur sandbox-2.6.orig/scripts/gen_symbol_version_map.awk
sandbox-2.6/scripts/gen_symbol_version_map.awk
+--- sandbox-2.6.orig/scripts/gen_symbol_version_map.awk 2009-02-20
06:29:29.000000000 +0000
++++ sandbox-2.6/scripts/gen_symbol_version_map.awk 2015-06-08
19:29:55.727290000 +0000
+@@ -14,7 +14,7 @@
+
+ # Only check FUNCtion symbols which are not LOCAL, or
+ # do not have DEFAULT visibility
+- if ($4 != "FUNC" || $5 == "LOCAL" || $6 != "DEFAULT")
++ if ($4 != "FUNC" || $5 == "LOCAL" || ($6 != "DEFAULT" && $6 !=
"PROTECTED"))
+ next;
+
+ for (x in SYMBOLS) {
diff --git a/sys-apps/sandbox/sandbox-2.6-r999.ebuild
b/sys-apps/sandbox/sandbox-2.6-r999.ebuild
index f9efc11..1221d28 100644
--- a/sys-apps/sandbox/sandbox-2.6-r999.ebuild
+++ b/sys-apps/sandbox/sandbox-2.6-r999.ebuild
@@ -54,6 +54,7 @@ src_unpack() {
epatch "${FILESDIR}"/${P}-check-empty-paths-at.patch #346929
epatch "${FILESDIR}"/${P}-no-pch.patch #425524
epatch "${FILESDIR}"/${P}-musl.patch
+ epatch "${FILESDIR}"/${P}-include-PROTECTED-symbols.patch
epatch_user
}