Bug#623997: In 3.5.16-8 no longer starts with grsecurity, even if disabled

[Helge Kreutzmann]

Hello,
after the security update of iceweasel (DSA 2268-1) iceweasel no longer
starts, even if I 
paxctl -c /usr/lib/xulrunner-1.9.1/xulrunner-stub
paxctl -r /usr/lib/xulrunner-1.9.1/xulrunner-stub
Before the upgrade and after a downgrade, i.e.
dpkg -i xulrunner-1.9.1_1.9.1.16-7_amd64.deb libmozjs2d_1.9.1.16-7_amd64.deb
and the above commands, iceweasel works again. 

Looks like getting web browser security in Debian is getting harder
:-((

I'll post any further finding once available, if you hear anything
from upstream (tips, patches, ...) or any other source (hardened
gentoo, maybe) it would be great if you could post them as well.

Thanks!

Greetings

             Helge

-- 
      Dr. Helge Kreutzmann                     debian at helgefjell.de
           Dipl.-Phys.                   http://www.helgefjell.de/debian.php
        64bit GNU powered                     gpg signed mail preferred
           Help keep free software "libre": http://www.ffii.de/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/attachments/20110709/9f953b84/attachment.pgp>