guile30: Attempt to MPROTECT

[Greg Troxel <gdt%lexort.com@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Greg Troxel <gdt%lexort.com@localhost>
Pushed By:	gdt
Date:		Fri Mar 20 13:02:51 2020 -0400
Changeset:	7690be919d0a78bc55b3581cea0d7bf3860e041a

Modified Files:
	guile30/Makefile

Log Message:
guile30: Attempt to MPROTECT

These statements are not seeming effective.  I can confirm that if the
guile binary is treated with "paxctl +m" after it is installed, then
with mprotect turned back on it will run.

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=7690be919d0a78bc55b3581cea0d7bf3860e041a

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 guile30/Makefile | 6 ++++++
 1 file changed, 6 insertions(+)

diffs:
diff --git a/guile30/Makefile b/guile30/Makefile
index 07e2210c51..4155ad22ba 100644
--- a/guile30/Makefile
+++ b/guile30/Makefile
@@ -74,6 +74,12 @@ PLIST.charset=	yes
 post-configure:
 	${ECHO} '#define FLEXIBLE_ARRAY_MEMBER /**/' >> ${WRKSRC}/config.h
 
+.include "../../mk/pax.mk"
+# \todo Mark the guile with paxctl +m after it is built but before
+# it is used in the build.
+# \todo Make this actually work; manual paxctl +m after install does.
+NOT_MPROTECT_SAFE+=	${GUILE_PREFIX}/bin/guile
+
 .include "../../devel/gmp/buildlink3.mk"
 .include "../../converters/libiconv/buildlink3.mk"
 .include "../../devel/gettext-lib/buildlink3.mk"