Attachment 242126 Details for Bug 268318 – www/apache24: Disable ASLR for compiled binaries

[patch] www/apache24: Disable ASLR for compiled binaries

apache24.noaslr.diff (text/plain), 1.81 KB, created by Marek Zarychta on 2023-05-11 20:31:33 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Marek Zarychta

Created: 2023-05-11 20:31:33 UTC

Size: 1.81 KB

patch

obsolete

>diff --git a/www/apache24/Makefile b/www/apache24/Makefile
>index 96526dddad..b96cb3d4ba 100644
>--- a/www/apache24/Makefile
>+++ b/www/apache24/Makefile
>@@ -1,5 +1,6 @@
> PORTNAME=	apache24
> PORTVERSION=	2.4.57
>+PORTREVISION=	1
> CATEGORIES=	www
> MASTER_SITES=	APACHE_HTTPD
> DISTNAME=	httpd-${PORTVERSION}
>@@ -226,6 +227,15 @@ post-install:
> 	# Remove files left behind by strip
> 	${RM} ${STAGEDIR}${DATADIR}/build/ecp.???????? 2>/dev/null
> 
>+.if ${PORT_OPTIONS:MNOASLR}
>+. for f in checkgid fcgistarter htcacheclean httpd rotatelogs
>+	${ELFCTL} -e +noaslr ${STAGEDIR}${PREFIX}/sbin/${f}
>+. endfor
>+. for f in ab htdbm htdigest htpasswd httxt2dbm logresolve
>+	${ELFCTL} -e +noaslr ${STAGEDIR}${PREFIX}/bin/${f}
>+. endfor
>+.endif
>+
> post-install-LOG_FORENSIC-on:
> 	${INSTALL_SCRIPT} ${WRKSRC}/support/check_forensic ${STAGEDIR}${PREFIX}/sbin
> 
>diff --git a/www/apache24/Makefile.options b/www/apache24/Makefile.options
>index c0e6a60b8c..8f059ec85a 100644
>--- a/www/apache24/Makefile.options
>+++ b/www/apache24/Makefile.options
>@@ -59,7 +59,7 @@ MOST_DISABLED_MODULES= \
> #     enable/disable additional PROXY/SESSION modules
> META_MODULES=	PROXY SESSION
> 
>-ADDITIONAL_OPT=	LUAJIT IPV4_MAPPED
>+ADDITIONAL_OPT=	LUAJIT IPV4_MAPPED NOASLR
> 
> # ===================================================================================
> 
>diff --git a/www/apache24/Makefile.options.desc b/www/apache24/Makefile.options.desc
>index 353658c36b..9df7e91a32 100644
>--- a/www/apache24/Makefile.options.desc
>+++ b/www/apache24/Makefile.options.desc
>@@ -18,6 +18,7 @@ MPM_EVENT_DESC=			MPM worker variant with the goal of consuming threads only for
> # additional (no modules)
> IPV4_MAPPED_DESC=		Allow IPv6 sockets to handle IPv4 connections
> LUAJIT_DESC=			LuaJit Support
>+NOASLR_DESC=			Disable ASLR for compiled binaries
> 
> # =====================================
> # modules

Flags:

joneum: maintainer-approval?
joneum: maintainer-approval?

Actions: View | Diff

Attachments on bug 268318: 238714 | 242126 | 242619 | 246722