Merge pull request #1458 from xen0n/patch-1

Allow running on PaX kernels
sameersbn · Jan 4, 2018 · fd63259 · fd63259
2 parents 5201f76 + 29fc2f5
commit fd63259
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/assets/build/install.sh b/assets/build/install.sh
@@ -42,6 +42,11 @@ cd -
 rm -rf /tmp/re2
 DEBIAN_FRONTEND=noninteractive apt-get purge -y --auto-remove checkinstall
 
+# PaX-mark ruby
+# Applying the mark late here does make the build usable on PaX kernels, but
+# still the build itself must be executed on a non-PaX kernel. It's done here
+# only for simplicity.
+paxctl -Cm `which ruby${RUBY_VERSION}`
 # https://en.wikibooks.org/wiki/Grsecurity/Application-specific_Settings#Node.js
 paxctl -Cm `which nodejs`