Denied RWX mmap while build gimp in chroot
 

Hello!
This issue after update to gimp-2.6.12-r5 (build in chroot).

The host system with 3.2.23-hardened-r1 kernel, arch x86_64, profile
hardened/linux/amd64.
chroot: arch i686, default/linux/x86/10.0/desktop.


This is part of the build log

checking for connect... yes
checking for remove... yes
checking for shmat... yes
checking for IceConnectionNumber in -lICE... yes
checking for pkg-config... (cached) /usr/bin/pkg-config
checking for GTK+ - version >= 2.12.5... no
*** Could not run GTK+ test program, checking why...
*** The test program compiled, but did not run. This usually means
*** that the run-time linker is not finding GTK+ or finding the wrong
*** version of GTK+. If it is not finding GTK+, you'll need to set your
*** LD_LIBRARY_PATH environment variable, or edit /etc/ld.so.conf to point
*** to the installed location Also, make sure you have run ldconfig if that
*** is required on your system
***
*** If you have an old version installed, it is best to remove it, although
*** you may also be able to get things to work by modifying LD_LIBRARY_PATH
configure: error: Test for GTK+ failed. See the file 'INSTALL' for help.


Please see full log on http://pastebin.com/2uzQteTD



And grsec log on host:
2012-10-01T20:11:33.198786+04:00 miniatx kernel: grsec: From
172.21.21.20: denied RWX mmap of
/var/local/gentoo_chroots/g32s/usr/lib/opengl/xorg-x11/lib/libGL.so.1.2
by
/var/local/gentoo_chroots/g32s/var/tmp/portage/media-gfx/gimp-2.6.12-r5/work/gimp-2.6.12/conftest[conftest:30201]
uid/euid:0/0 gid/egid:0/0, parent
/var/local/gentoo_chroots/g32s/var/tmp/portage/media-gfx/gimp-2.6.12-r5/work/gimp-2.6.12/configure[configure:30200]
uid/euid:0/0 gid/egid:0/0

Please suggest any solution.

Denied RWX mmap while build gimp in chroot
 

On Mon, 01 Oct 2012 20:42:11 +0400
"Alexander Y. Tiurin" <alexanderyt@gmail.com> wrote:

> And grsec log on host:
> 2012-10-01T20:11:33.198786+04:00 miniatx kernel: grsec: From
> 172.21.21.20: denied RWX mmap of
> /var/local/gentoo_chroots/g32s/usr/lib/opengl/xorg-x11/lib/libGL.so.1.2
> by
> /var/local/gentoo_chroots/g32s/var/tmp/portage/media-gfx/gimp-2.6.12-r5/work/gimp-2.6.12/conftest[conftest:30201]
> uid/euid:0/0 gid/egid:0/0, parent
> /var/local/gentoo_chroots/g32s/var/tmp/portage/media-gfx/gimp-2.6.12-r5/work/gimp-2.6.12/configure[configure:30200]
> uid/euid:0/0 gid/egid:0/0
>
> Please suggest any solution.

The following quick hack should work.

# paxctl -m /var/local/gentoo_chroots/g32s/var/tmp/portage/media-gfx/gimp-2.6.12-r5/work/gimp-2.6.12/conftest
And then:
# chroot /var/local/gentoo_chroots/g32s ebuild /usr/portage/media-gfx/gimp/gimp-2.6.12-r5.ebuild merge