[Debian GNUstep maintainers] Bug#453242: gnustep-base: FTBFS: checking if ffcall trampolines work... no

[Hubert Chathi]

On Wed, 12 Dec 2007 08:11:25 +0100, Lucas Nussbaum <lucas at lucas-nussbaum.net> said:

> On 11/12/07 at 21:10 -0500, Hubert Chathi wrote:
>> Do you have any security-related features enabled?  PaX, grsecurity,
>> SELinux, etc.?  It could be related to GNUstep bug #18968.
>> 
>> http://savannah.gnu.org/bugs/?func=detailitem&item_id=18968

> No. But Opterons have the nx bit. Maybe that's part of the problem?

OK, that may explain why there have been reported problems of ffcall on
amd64 (#451356) even though upstream listed amd64 as having been tested
and working.

Thinking about this more, I really don't like the idea of not being able
to run on a system that has PaX, or grsecurity, or SELinux, as the
Debian default.  It seems like we would be discouraging people from
using the extra security features.

It looks like the best thing to do is to default to libffi, but make it
easy for someone to recompile gnustep-base with ffcall if they want.  I
believe that both options with gnustep-base are binary-compatible
(i.e. one would just need to recompile gnustep-base, and not all of the
GNUstep applications).

-- 
Hubert Chathi <uhoreg at debian.org> -- Jabber: hubert at uhoreg.ca
PGP/GnuPG key: 1024D/124B61FA         http://www.uhoreg.ca/
Fingerprint: 96C5 012F 5F74 A5F7 1FF7  5291 AF29 C719 124B 61FA