mirrors/n
mirrors/n
0
0
Fork 0
mirror of https://github.com/tj/n.git synced 2024-11-29 21:56:16 +01:00
Code Issues Releases Wiki Activity

Merge pull request #305 from chrootsu/copy-xattr-when-activate

Browse Source 
Added the disabling PaX's mprotect() during an activation.
This commit is contained in:
Max Rittmüller 2015-09-16 22:36:06 +02:00
commit 1388dd0926
1 changed files with 27 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
bin/n
View File

@ -401,6 +401,31 @@ tarball_url() {
} }
#
# Disable PaX mprotect for <binary>
#
disable_pax_mprotect() {
test -z $1 && abort "binary required"
local binary=$1
# try to disable mprotect via XATTR_PAX header
local PAXCTL=$(PATH="/sbin:/usr/sbin:$PATH" which paxctl-ng 2>&1)
local PAXCTL_ERROR=1
if [ -x "$PAXCTL" ]; then
$PAXCTL -l && $PAXCTL -m "$binary" >/dev/null 2>&1
PAXCTL_ERROR="$?"
fi
# try to disable mprotect via PT_PAX header
if [ $PAXCTL_ERROR != 0 ]; then
PAXCTL=$(PATH="/sbin:/usr/sbin:$PATH" which paxctl 2>&1)
if [ -x "$PAXCTL" ]; then
$PAXCTL -Cm "$binary" >/dev/null 2>&1
fi
fi
}
# #
# Activate <version> # Activate <version>
# #
@ -417,6 +442,7 @@ activate() {
cp -fR "$dir/$subdir" $N_PREFIX cp -fR "$dir/$subdir" $N_PREFIX
fi fi
done done
disable_pax_mprotect "$N_PREFIX/bin/node"
fi fi
} }
@ -490,20 +516,7 @@ install() {
[ $QUIET == false ] && erase_line [ $QUIET == false ] && erase_line
rm -f $dir/n.lock rm -f $dir/n.lock
# try to disable mprotect via XATTR_PAX header disable_pax_mprotect bin/node
local PAXCTL=$(PATH="/sbin:/usr/sbin:$PATH" which paxctl-ng 2>&1)
local PAXCTL_ERROR=1
if [ -x "$PAXCTL" ]; then
$PAXCTL -l && $PAXCTL -m bin/node >/dev/null 2>&1
PAXCTL_ERROR="$?"
fi
# try to disable mprotect via PT_PAX header
if [ $PAXCTL_ERROR != 0 ]; then
PAXCTL=$(PATH="/sbin:/usr/sbin:$PATH" which paxctl 2>&1)
if [ -x "$PAXCTL" ]; then
$PAXCTL -Cm bin/node >/dev/null 2>&1
fi
fi
if $ACTIVATE ; then if $ACTIVATE ; then
activate ${BINS[$DEFAULT]}/$version activate ${BINS[$DEFAULT]}/$version