Chris S wrote:
Greetings,
Has anyone been able to build *any* version of mono under hardened profile?
I've been chasing the error for a while now (all portage versions
1.1.4/5/6/7 fail with same error).
I've never been able to get mono to build with the hardened
kernel extensions active. The problem, as you might have
already deduced, is that mono violates some of hardened's
protection bits -- specifically, the mono runtime tries to
execute data as code. Once mono's installed you can flag
the binary to permit this. But during the build, a new mono
binary is built then run against some IL code, and it fails.
I have always had success in building mono by keeping a
separate kernel around without and of the GRSEC stuff
compiled it. It's a pain in the ass but works. I suspect
the only real 'solution' would be to somehow hack up the
ebuild to detect GRSEC and set the proper flags on the new
binary mid-build.
--Mike
--
[email protected] mailing list
