On Thu, 28 Aug 2014 17:57:11 -0400 "Anthony G. Basile" <[email protected]> wrote:
> scanelf is the last line of defense. If we get there, paxctl and > paxctl-ng have failed, so we can't trust them really. Changing the > exit code for scanelf could cause other issues, eg in portage where > it is used in a few places. As we discussed today during the > Hardened meeting, we'll ewarn if we get here. > > scanelf is also used in the new python based revdep-rebuild. So, changing it will cause issues there too. -- Brian Dolbec <dolsen>
