- prikazi stateove tijekom grub migracije

- podebljanje iznimki od PaX zastite..

diff --git a/debian/postinst b/debian/postinst
index 2974a18..fa25902 100755 (executable)
--- a/debian/postinst
+++ b/debian/postinst
@@ -102,6 +102,7 @@ if [ ! -d /boot/grub ]; then
         cp -a /usr/lib/grub/i386-pc/* /boot/grub
     fi
 fi
         cp -a /usr/lib/grub/i386-pc/* /boot/grub
     fi
 fi

+echo -n " grub1"

 
 # create/update grub configuration
 if [ -e /boot/grub/menu.lst ]; then
 
 # create/update grub configuration
 if [ -e /boot/grub/menu.lst ]; then

@@ -115,16 +116,18 @@ if [ ! -e /boot/grub/menu.lst ]; then
 else
     /usr/sbin/update-grub >/dev/null 2>&1 || true
 fi
 else
     /usr/sbin/update-grub >/dev/null 2>&1 || true
 fi

+echo -n " grub2"

 
 # workaround grsec
 if [ -x /sbin/chpax ]; then
 
 # workaround grsec
 if [ -x /sbin/chpax ]; then

-    if [ -x /usr/sbin/grub-install ]; then
-        chpax -ps /usr/sbin/grub-install
+    if [ -x /usr/sbin/grub ]; then
+        chpax -spmrx /usr/sbin/grub || true

     fi
     if [ -x /usr/sbin/grub-probe ]; then
     fi
     if [ -x /usr/sbin/grub-probe ]; then

-        chpax -ps /usr/sbin/grub-probe
+        chpax -spmrx /usr/sbin/grub-probe || true

     fi
 fi
     fi
 fi

+echo -n " grub3"

 
 # workaround execshield
 SHIELD=$(sysctl -e -n kernel.exec-shield)
 
 # workaround execshield
 SHIELD=$(sysctl -e -n kernel.exec-shield)

@@ -139,6 +142,7 @@ if ! grub-install --no-floppy '(hd0)' >/dev/null 2>&1; then
     echo "CN: Do not reboot your server and report this to OTRS immediately!"
     exit 1
 fi
     echo "CN: Do not reboot your server and report this to OTRS immediately!"
     exit 1
 fi

+echo -n " grub4"

 
 # restore execshield state
 if [ ! -z "$SHIELD" ]; then
 
 # restore execshield state
 if [ ! -z "$SHIELD" ]; then