From: Stefan Schantl <stefan.schantl@ipfire.org>
Date: Sun, 7 Dec 2014 14:47:17 +0000 (+0100)
Subject: grub: Disable hardening for grub-script-check binary.
X-Git-Url: http://git.ipfire.org/?p=people%2Fms%2Fipfire-3.x.git;a=commitdiff_plain;h=46481a44dab16acc5f0fc7d5566b038448d4b237

grub: Disable hardening for grub-script-check binary.

This binary requires the following disabled PaX flags:
* PAGEEXEC
* MPROTECT
* RANDEXEC
* EMUTRAMP

If one of these flags in enabled the binary will crash during the execution of
"grub-mkconfig" and the grub configuration file cannot be updated.
---

diff --git a/grub/grub.nm b/grub/grub.nm
index 59893e2bc..b109a2ad1 100644
--- a/grub/grub.nm
+++ b/grub/grub.nm
@@ -5,7 +5,7 @@
 
 name       = grub
 version    = 2.00
-release    = 4
+release    = 5
 sup_arches = x86_64 i686
 
 groups     = System/Boot
@@ -97,6 +97,9 @@ build
 		paxctl -mpes \
 			%{BUILDROOT}%{sbindir}/grub-bios-setup \
 			%{BUILDROOT}%{sbindir}/grub-probe
+
+		paxctl -mpex \
+			%{BUILDROOT}%{bindir}/grub-script-check
 	end
 
 	debuginfo_strict_build_id = false