lix-project/lix-releng-staging
0
0
Fork 0
Code Packages Activity

On Linux, disable address space randomization

Browse source
This commit is contained in:
Eelco Dolstra 2014-09-17 17:21:13 +02:00
parent 5a05cf4063
commit d98bfcbf81
2 changed files with 9 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
configure.ac
View file

@ -121,11 +121,6 @@ AC_CHECK_HEADER([err.h], [], [bsddiff_compat_include="-Icompat-include"])
AC_SUBST([bsddiff_compat_include])
# Check whether we have the personality() syscall, which allows us to
# do i686-linux builds on x86_64-linux machines.
AC_CHECK_HEADERS([sys/personality.h])
# Check for <linux/fs.h> (for immutable file support).
AC_CHECK_HEADERS([linux/fs.h])

14
src/libstore/build.cc
View file

@ -57,9 +57,8 @@
#include <netinet/ip.h>
#endif
#if HAVE_SYS_PERSONALITY_H
#if __linux__
#include <sys/personality.h>
#define CAN_DO_LINUX32_BUILDS
#endif
#if HAVE_STATVFS
@ -1182,7 +1181,7 @@ static string get(const StringPairs & map, const string & key)
static bool canBuildLocally(const string & platform)
{
return platform == settings.thisSystem
#ifdef CAN_DO_LINUX32_BUILDS
#if __linux__
|| (platform == "i686-linux" && settings.thisSystem == "x86_64-linux")
#endif
;
@ -2077,7 +2076,7 @@ void DerivationGoal::initChild()
/* Close all other file descriptors. */
closeMostFDs(set<int>());
#ifdef CAN_DO_LINUX32_BUILDS
#if __linux__
/* Change the personality to 32-bit if we're doing an
i686-linux build on an x86_64-linux machine. */
struct utsname utsbuf;
@ -2085,7 +2084,7 @@ void DerivationGoal::initChild()
if (drv.platform == "i686-linux" &&
(settings.thisSystem == "x86_64-linux" ||
(!strcmp(utsbuf.sysname, "Linux") && !strcmp(utsbuf.machine, "x86_64")))) {
if (personality(0x0008 | 0x8000000 /* == PER_LINUX32_3GB */) == -1)
if (personality(PER_LINUX32_3GB) == -1)
throw SysError("cannot set i686-linux personality");
}
@ -2095,6 +2094,11 @@ void DerivationGoal::initChild()
int cur = personality(0xffffffff);
if (cur != -1) personality(cur | 0x0020000 /* == UNAME26 */);
}
/* Disable address space randomization for improved
determinism. */
int cur = personality(0xffffffff);
if (cur != -1) personality(cur | ADDR_NO_RANDOMIZE);
#endif
/* Fill in the environment. */