NetBSD Problem Report #51612

From www@NetBSD.org  Tue Nov  8 03:00:07 2016
Return-Path: <www@NetBSD.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client CN "mail.netbsd.org", Issuer "Postmaster NetBSD.org" (verified OK))
	by mollari.NetBSD.org (Postfix) with ESMTPS id 3E02F7A2C6
	for <gnats-bugs@gnats.NetBSD.org>; Tue,  8 Nov 2016 03:00:07 +0000 (UTC)
Message-Id: <20161108030005.D65CF7A2CD@mollari.NetBSD.org>
Date: Tue,  8 Nov 2016 03:00:05 +0000 (UTC)
From: dhgutteridge@sympatico.ca
Reply-To: dhgutteridge@sympatico.ca
To: gnats-bugs@NetBSD.org
Subject: Minor adjustments to the paxctl(8) man page
X-Send-Pr-Version: www-1.0

>Number:         51612
>Category:       misc
>Synopsis:       Minor adjustments to the paxctl(8) man page
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    pgoyette
>State:          closed
>Class:          doc-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Nov 08 03:05:00 +0000 2016
>Closed-Date:    Tue Nov 08 03:20:48 +0000 2016
>Last-Modified:  Sun Dec 18 06:45:00 +0000 2016
>Originator:     David H. Gutteridge
>Release:        HEAD
>Organization:
>Environment:
n/a
>Description:
The changes are self-evident from the diff, but just in case there
are any questions, here's what's what.

Content:

* The Bugs section referred solely to PaX Segvguard, but there are
other flags available now, so I generalized the statement.
* I've added that any flags stored as ELF notes don't survive the
binary being updated. This is probably obvious to many, but I think
it bears being explicitly mentioned.

>How-To-Repeat:

>Fix:
--- paxctl.8~
+++ paxctl.8	2016-11-07 21:54:07.642529519 -0500
@@ -23,7 +23,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd September 17, 2009
+.Dd November 7, 2016
 .Dt PAXCTL 8
 .Os
 .Sh NAME
@@ -110,8 +110,9 @@
 utility currently uses
 .Xr elf 5
 .Dq note
-sections to mark executables as PaX Segvguard enabled.
+sections to mark executables as having PaX flags enabled.
 This will be done using
 .Xr fileassoc 9
 in the future so that we can control who does the marking and
-not altering the binary file signature.
+not altering the binary file signature. (Note this also means that
+at present any flags set do not survive binary file upgrades.)

>Release-Note:

>Audit-Trail:

Responsible-Changed-From-To: misc-bug-people->pgoyette
Responsible-Changed-By: pgoyette@NetBSD.org
Responsible-Changed-When: Tue, 08 Nov 2016 03:20:48 +0000
Responsible-Changed-Why:
I handled it.


State-Changed-From-To: open->closed
State-Changed-By: pgoyette@NetBSD.org
State-Changed-When: Tue, 08 Nov 2016 03:20:48 +0000
State-Changed-Why:
Suggested man-page changed have been merged and committed.


From: "Paul Goyette" <pgoyette@netbsd.org>
To: gnats-bugs@gnats.NetBSD.org
Cc: 
Subject: PR/51612 CVS commit: src/usr.sbin/paxctl
Date: Tue, 8 Nov 2016 03:20:08 +0000

 Module Name:	src
 Committed By:	pgoyette
 Date:		Tue Nov  8 03:20:07 UTC 2016

 Modified Files:
 	src/usr.sbin/paxctl: paxctl.8

 Log Message:
 Merge changes from David H. Gutteridge in PR misc/51612

 Thanks!


 To generate a diff of this commit:
 cvs rdiff -u -r1.14 -r1.15 src/usr.sbin/paxctl/paxctl.8

 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.

From: "Soren Jacobsen" <snj@netbsd.org>
To: gnats-bugs@gnats.NetBSD.org
Cc: 
Subject: PR/51612 CVS commit: [netbsd-7] src/usr.sbin/paxctl
Date: Sun, 18 Dec 2016 06:41:33 +0000

 Module Name:	src
 Committed By:	snj
 Date:		Sun Dec 18 06:41:33 UTC 2016

 Modified Files:
 	src/usr.sbin/paxctl [netbsd-7]: paxctl.8

 Log Message:
 Pull up following revision(s) (requested by riastradh in ticket #1313):
 	usr.sbin/paxctl/paxctl.8: revision 1.15
 Merge changes from David H. Gutteridge in PR misc/51612
 Thanks!


 To generate a diff of this commit:
 cvs rdiff -u -r1.14 -r1.14.4.1 src/usr.sbin/paxctl/paxctl.8

 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.

>Unformatted:

Home	PR Database Search