Gentoo Hardened x86_64: failed to map segment from shared ob

Author

Message

Macindy

Joined: 19 Feb 2006
Posts: 2

Posted: Sun Feb 19, 2006 10:07 am Post subject: Gentoo Hardened x86_64: failed to map segment from shared ob

Hi forum!

I want to install the ioncube loader on my x86_64 Gentoo Hardened System.
PHP is 4.4.1

My Config:

Code:

zend_extension_ts=/usr/local/ioncube/ioncube_loader_lin_4.4_ts.so

The error:

Code:

[Sun Feb 19 10:01:48 2006] [notice] Apache configured -- resuming normal operations
Failed loading /usr/local/ioncube/ioncube_loader_lin_4.4_ts.so: /usr/local/ioncube/ioncube_loader_lin_4.4_ts.so: failed to map segment from shared object: Permission denied

The file has chmod 777

php -v

Code:

PHP 4.4.1-pl3-gentoo (cli) (built: Feb 19 2006 08:48:25)
Copyright (c) 1997-2004 The PHP Group
Zend Engine v1.3.0, Copyright (c) 1998-2004 Zend Technologies

I think this is related with the hardened stuff - but i can't compile it myself or can I?

liaison
ionCube Support

Joined: 16 Dec 2004
Posts: 2788

Posted: Sun Feb 19, 2006 10:26 am Post subject:

Hi You're right, it's related to the kernel security that unless permissive, prevents shared libraries from being dynamically lniked unless they've been permissioned. I'm not sure whether the following commands exist on your gentoo system, but you could try chcon -t shlib_t .so or chcon -t texrel_shlib_t .so or restorecon *.so on the Loader .so files. A google search generates many results, mostly suggesting the above. I would imagine that it's also discussed in the Gentoo docs, and you should be able to get help on configuring your system in Gentoo specific forums. _________________ Community Admin

Macindy

Joined: 19 Feb 2006
Posts: 2

Posted: Sun Feb 19, 2006 10:57 am Post subject:

The restorecon and chcon stuff is for selinux. But selinux is not running. I use PIE etc. Do you have an idea how I can fix that?

liaison
ionCube Support

Joined: 16 Dec 2004
Posts: 2788

Posted: Sun Feb 19, 2006 11:13 am Post subject:

indeed. We don't use gentoo ourselves, and as it's a general getoo issue, asking in the gentoo docs or forums would be a good place. A google search tends to cover the issue with selinux, but it's an issue that will come up for libraries of many applications, so I'm sure that it's covered in gentoo docs. We'll do some more searching too as we'd like to know the answer as well. _________________ Community Admin

Display posts from previous:

	ionCube Forum Index -> ionCube Loader	All times are GMT + 1 Hour
Page 1 of 1

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum