Mercurial > hg > icedtea7
changeset 2818:fe2936ab2d22
PR2530: PaX mark the installed JDK so it runs on hardened systems
2015-05-20 Andrew John Hughes <gnu_andrew@member.fsf.org>
PR2530: PaX mark the installed JDK so it runs
on hardened systems
* Makefile.am:
(install-exec-local): PaX mark installed JDK.
* NEWS: Updated.
| author | Andrew John Hughes <gnu_andrew@member.fsf.org> |
|---|---|
| date | Tue, 14 Jul 2015 20:45:14 +0100 |
| parents | 20aca8ea2ff9 |
| children | 19d189fdd81a |
| files | ChangeLog Makefile.am NEWS |
| diffstat | 3 files changed, 10 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- a/ChangeLog Tue Jul 14 20:34:03 2015 +0100 +++ b/ChangeLog Tue Jul 14 20:45:14 2015 +0100 @@ -1,3 +1,11 @@ +2015-05-20 Andrew John Hughes <gnu_andrew@member.fsf.org> + + PR2530: PaX mark the installed JDK so it runs + on hardened systems + * Makefile.am: + (install-exec-local): PaX mark installed JDK. + * NEWS: Updated. + 2015-07-14 Andrew John Hughes <gnu_andrew@member.fsf.org> PR94: empty install target in Makefile.am
--- a/Makefile.am Tue Jul 14 20:34:03 2015 +0100 +++ b/Makefile.am Tue Jul 14 20:45:14 2015 +0100 @@ -2778,6 +2778,7 @@ for files in $(BUILD_SDK_DIR)/tapset/*.stp; do \ $(INSTALL_DATA) $${files} $(DESTDIR)${prefix}/tapset; \ done + $(abs_top_builddir)/pax-mark-vm $(DESTDIR)${prefix} install-data-local: ${mkinstalldirs} $(DESTDIR)${prefix}
--- a/NEWS Tue Jul 14 20:34:03 2015 +0100 +++ b/NEWS Tue Jul 14 20:45:14 2015 +0100 @@ -325,6 +325,7 @@ - PR2496: Enable system PCSC support by default - PR2499: Update remove-intree-libraries.sh script - PR2507, G541462: Only apply PaX markings by default on running PaX kernels + - PR2530: PaX mark the installed JDK so it runs on hardened systems * AArch64 port - Add copyright to aarch64_ad.m4 - S8069593: Changes to JavaThread::_thread_state must use acquire and release