[oe-commits] Roman I Khimov : paxtest: new recipe, version 0.9.9

git version control git at git.openembedded.org
Sat Oct 30 07:15:41 UTC 2010


Module: openembedded.git
Branch: org.openembedded.dev
Commit: 237d418d6409fff608cb7acdcfefe8bbd6c150ad
URL:    http://gitweb.openembedded.net/?p=openembedded.git&a=commit;h=237d418d6409fff608cb7acdcfefe8bbd6c150ad

Author: Roman I Khimov <khimov at altell.ru>
Date:   Mon Oct 25 16:26:41 2010 +0400

paxtest: new recipe, version 0.9.9

PaX is a Linux kernel patch which adds much stricter control on how memory is
being used by applications. A normal Linux kernel leaves the control to the
application and does not implement any enforcement. Especially buffer overflow
attacks benefit from the absence of kernel enforced memory control. PaX tries
to do its best to enforce this control of memory used by applications, thereby
making it harder to successfully exploit buffer overflows.

Paxtest provides a regression test suite that covers most (but not all) of PaX
functionality. It can also be used to test other memory protection patches.

Signed-off-by: Roman I Khimov <khimov at altell.ru>

---

 recipes/paxtest/paxtest_0.9.9.bb |   24 ++++++++++++++++++++++++
 1 files changed, 24 insertions(+), 0 deletions(-)

diff --git a/recipes/paxtest/paxtest_0.9.9.bb b/recipes/paxtest/paxtest_0.9.9.bb
new file mode 100644
index 0000000..c840ace
--- /dev/null
+++ b/recipes/paxtest/paxtest_0.9.9.bb
@@ -0,0 +1,24 @@
+DESCRIPTION = "Test suite for the PaX kernel patch"
+HOMEPAGE = "http://www.grsecurity.net/~spender/"
+LICENSE = "GPLv2+"
+
+SRC_URI = "http://www.grsecurity.net/~spender/paxtest-${PV}.tgz"
+SRC_URI[md5sum] = "7599f41823c73174d056d01b12ae5662"
+SRC_URI[sha256sum] = "caca340492dedeee588d47683efde9797cba4fce5adca5d5f9b0b73b2120e1ab"
+
+COMPATIBLE_HOST = "(x86_64|i.86)*"
+
+PARALLEL_MAKE = ""
+
+EXTRA_OEMAKE = "-e -f Makefile.psm"
+
+CFLAGS += "-D_FORTIFY_SOURCE=0 -DRUNDIR=\\"${RUNDIR}\\""
+
+export RUNDIR="${libexecdir}/paxtest"
+export SHLDFLAGS="${LDFLAGS}"
+
+do_install() {
+	oe_runmake DESTDIR=${D} BINDIR=${bindir} install
+}
+
+FILES_${PN}-dbg += "${libexecdir}/paxtest/.debug"
\ No newline at end of file





More information about the Openembedded-commits mailing list