Gentoo Project

Hardened

Bug Reports

• app-admin/paxtest-0.9.14 build failed

  579702 - Assigned to The Gentoo Linux Hardened Team
• sys-apps/elfix Consider installing paxctl-ng to /bin or /sbin instead

  587410 - Assigned to The Gentoo Linux Hardened Team
• sys-apps/elfix: Provide one-line output format for paxctl-ng

  591022 - Assigned to The Gentoo Linux Hardened Team
• sys-apps/elfix-0.9.2 "paxctl-ng -L foo" fails but returns success when foo has no PT_PAX_FLAGS header

  613698 - Assigned to The Gentoo Linux Hardened Team
• sys-apps/apparmor-2.13.2 - Apparmor denies /usr/libexec/virt-aa-helper access to ovmf files even when profiles allows it

  683976 - Assigned to The Gentoo Linux Hardened Team
• sys-apps/elfix-0.9.5 should use python-single-r1.eclass

  708676 - Assigned to Anthony Basile
• app-admin/paxtest-0.9.15-r1 : chpax-0.7/chpax.h: fatal error: a.out.h: No such file or directory

  716282 - Assigned to Gentoo musl team
• app-admin/paxtest installs files with unresolved SONAME dependencies

  722084 - Assigned to The Gentoo Linux Hardened Team
• sys-apps/gradm-3.1.201903191516 calls cc directly

  725792 - Assigned to The Gentoo Linux Hardened Team
• sec-policy/apparmor-profiles - syslog-ng profile denies syslog-ng operations

  746965 - Assigned to The Gentoo Linux Hardened Team
• sec-policy/apparmor-profiles-3.0.1 uses the wrong path for dovecot and lacks rules for /usr/bin/doveadm

  813855 - Assigned to The Gentoo Linux Hardened Team
• app-crypt/ima-evm-utils-1.4-r1 fails tests: - FAIL: ima_hash.test sign_verify.test

  830906 - Assigned to The Gentoo Linux Hardened Team
• sys-apps/gradm-3.1.201903191516 installs udev rules without calling udev_reload

  851810 - Assigned to The Gentoo Linux Hardened Team
• sys-apps/apparmor-utils-3.0.4: ACCESS DENIED: open_wr:

  862207 - Assigned to The Gentoo Linux Hardened Team
• sys-apps/apparmor-3.0.4 fails tests (MUSL)

  874459 - Assigned to The Gentoo Linux Hardened Team
• sys-libs/libapparmor-3.0.4 - scanner.l: fatal error: grammar.h: No such file or directory

  884317 - Assigned to The Gentoo Linux Hardened Team
• sys-apps/apparmor-3.0.8 `ext/stdio_filebuf.h' file not found (musl)

  893848 - Assigned to The Gentoo Linux Hardened Team
• sys-apps/apparmor-3.1.4: wrong hardcoded paths for loading apparmor functions

  895302 - Assigned to The Gentoo Linux Hardened Team
• sec-policy/apparmor-profiles-3.1.4: zgrep profile causes permission denied in zgrep with app-alternatives/gzip

  911146 - Assigned to The Gentoo Linux Hardened Team
• sec-policy/apparmor-profiles incompatible with dovecot service, upstream fix available

  920295 - Assigned to The Gentoo Linux Hardened Team
• sys-apps/apparmor-utils-3.1.4-r1 installs deprecated .egg/.egg-info

  923421 - Assigned to The Gentoo Linux Hardened Team
• sys-libs/libapparmor-3.1.4 installs deprecated .egg/.egg-info

  923422 - Assigned to The Gentoo Linux Hardened Team
• sys-libs/libapparmor-3.1.4 fails to build without sys-apps/which: *** awk utility required for build but not available. Stop.

  926270 - Assigned to The Gentoo Linux Hardened Team
• sys-apps/apparmor-3.1.4 - clang++: clang++: error: error: unknown argument: -flto-partition=noneunknown argument: -flto-partition=none

  929086 - Assigned to The Gentoo Linux Hardened Team

Keywording Bug Reports

• sec-policy/apparmor-profiles: add ~arm64 keyword

  922178 - Assigned to The Gentoo Linux Hardened Team