From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 3B58A139082 for ; Thu, 30 Nov 2017 20:36:11 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 15FB2E0C2F; Thu, 30 Nov 2017 20:36:10 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id E759EE0C2F for ; Thu, 30 Nov 2017 20:36:09 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 3BF1833FE7D for ; Thu, 30 Nov 2017 20:36:08 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id D818EAD23 for ; Thu, 30 Nov 2017 20:36:06 +0000 (UTC) From: "Robin H. Johnson" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Robin H. Johnson" Message-ID: <1512074150.07380791d1f4739ba21be6bcc986b575c6fb8b27.robbat2@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: net-firewall/ipset/ X-VCS-Repository: repo/gentoo X-VCS-Files: net-firewall/ipset/ipset-6.34.ebuild X-VCS-Directories: net-firewall/ipset/ X-VCS-Committer: robbat2 X-VCS-Committer-Name: Robin H. Johnson X-VCS-Revision: 07380791d1f4739ba21be6bcc986b575c6fb8b27 X-VCS-Branch: master Date: Thu, 30 Nov 2017 20:36:06 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: fd6540b7-4aa2-4512-af91-2fe4f92dc066 X-Archives-Hash: d866fe8fce698a918df2f50ad7ae185d commit: 07380791d1f4739ba21be6bcc986b575c6fb8b27 Author: Robin H. Johnson gentoo org> AuthorDate: Thu Nov 30 20:33:14 2017 +0000 Commit: Robin H. Johnson gentoo org> CommitDate: Thu Nov 30 20:35:50 2017 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=07380791 net-firewall/ipset: block modules & CONFIG_PAX_CONSTIFY_PLUGIN Closes: https://bugs.gentoo.org/614896 Package-Manager: Portage-2.3.16, Repoman-2.3.6 Signed-off-by: Robin H. Johnson gentoo.org> net-firewall/ipset/ipset-6.34.ebuild | 2 ++ 1 file changed, 2 insertions(+) diff --git a/net-firewall/ipset/ipset-6.34.ebuild b/net-firewall/ipset/ipset-6.34.ebuild index 292b40eb05d..98a8e3e335b 100644 --- a/net-firewall/ipset/ipset-6.34.ebuild +++ b/net-firewall/ipset/ipset-6.34.ebuild @@ -36,6 +36,8 @@ pkg_setup() { # It does still build without NET_NS, but it may be needed in future. #CONFIG_CHECK="${CONFIG_CHECK} NET_NS" #ERROR_NET_NS="ipset requires NET_NS (network namespace) support in your kernel." + CONFIG_CHECK+=" !PAX_CONSTIFY_PLUGIN" + ERROR_PAX_CONSTIFY_PLUGIN="ipset contains constified variables (#614896)" build_modules=0 if use modules; then