grsecurity forums

Posted: **Thu Jun 16, 2005 2:46 pm**

Hi,

ich searched the forum but found no answer ...

I have two grsec systems , one RedHat , another Mandrake

The RedHat one has a libcrypto.so WITHOUT executable stack segment
The Mandrake has a libcrypto.so WITH executable stack segment
(GNU_STACK RWE , testet with readelf)

What do i need to do , so that Mandrake has a lib WITH non-exec stack segment ???? I found no solution to this in google or here in the forum.

Seems that libcrypto.so (openssl) does not really require executable stack ...

Thanks for your help !!

Posted: **Thu Jun 16, 2005 4:00 pm**

ehm , its glibc2.3.4 , on MANDRAKE

Why is glibc-2.3.4 a Problem on Debian ?

Is it the same for Mandrake ?

Posted: **Fri Jun 17, 2005 12:46 am**

Type Offset VirtAddr PhysAddr FileSiz MemSiz Flg Align
LOAD 0x000000 0x00000000 0x00000000 0xeb2fc 0xeb2fc R E 0x1000
LOAD 0x0ec000 0x000ec000 0x000ec000 0x113c4 0x14e58 RW 0x1000
DYNAMIC 0x0f055c 0x000f055c 0x000f055c 0x000d8 0x000d8 RW 0x4
GNU_EH_FRAME 0x0eb284 0x000eb284 0x000eb284 0x0001c 0x0001c R 0x4
GNU_STACK 0x000000 0x00000000 0x00000000 0x00000 0x00000 RWE 0x4

readelf -l output for libcrypto

Posted: **Fri Jun 17, 2005 5:06 am**

hmmm its possible to rebuild the libopenssl.src.rpm with the options

-Wa,--noexecstack ..... then the Stack Segment is not marked as exec anymore ...will see if it works after reboot of the machine this evening

Note
You have to extract the openssl.spec file to add the flags into it

i can post it here if anyone is interested .....