grub: Disable hardening for grub-script-check binary.
authorStefan Schantl <stefan.schantl@ipfire.org>
Sun, 7 Dec 2014 14:47:17 +0000 (15:47 +0100)
committerStefan Schantl <stefan.schantl@ipfire.org>
Sun, 7 Dec 2014 14:47:17 +0000 (15:47 +0100)
This binary requires the following disabled PaX flags:
* PAGEEXEC
* MPROTECT
* RANDEXEC
* EMUTRAMP

If one of these flags in enabled the binary will crash during the execution of
"grub-mkconfig" and the grub configuration file cannot be updated.

grub/grub.nm

index 59893e2..b109a2a 100644 (file)
@@ -5,7 +5,7 @@
 
 name       = grub
 version    = 2.00
-release    = 4
+release    = 5
 sup_arches = x86_64 i686
 
 groups     = System/Boot
@@ -97,6 +97,9 @@ build
                paxctl -mpes \
                        %{BUILDROOT}%{sbindir}/grub-bios-setup \
                        %{BUILDROOT}%{sbindir}/grub-probe
+
+               paxctl -mpex \
+                       %{BUILDROOT}%{bindir}/grub-script-check
        end
 
        debuginfo_strict_build_id = false