Skip to content

Commit

Permalink
Fixed Manual review requested.
Browse files Browse the repository at this point in the history
AnalyzeReviewTask.on_manual_review: Found files with executable stack. This adds PROT_EXEC to mmap(2) during mediation which may cause security denials. Either adjust your program to not require an executable stack, strip it with 'execstack --clear-execstack ...' or remove the affected file from your snap. Affected files: usr/lib/arm-linux-gnueabihf/libdirect-1.7.so.7.0.0
brunoherbelin committed Jan 10, 2025
1 parent 65395f8 commit 72f444f
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion snap/snapcraft.yaml
Original file line number Diff line number Diff line change
@@ -110,7 +110,7 @@ parts:
override-prime: |
craftctl default
# try remove execstack on armhf
for f in usr/lib/arm-linux-gnueabihf/libde265.so.0.1.1 usr/lib/arm-linux-gnueabihf/libmpeg2.so.0.1.0; do
for f in usr/lib/arm-linux-gnueabihf/libde265.so.0.1.8 usr/lib/arm-linux-gnueabihf/libmpeg2.so.0.1.0 usr/lib/arm-linux-gnueabihf/libdirect-1.7.so.7.0.0; do
if [ -f $f ]; then
execstack -c $f
fi

0 comments on commit 72f444f

Please sign in to comment.