[ILUG] Xorg, pax, grsecurity, and dri

[Tomek]

Hi,

Please smile ;-) What about this:
http://www.gentoo-linux.org/proj/en/hardened/pax-quickstart.xml ?

Especially the part:
"To disable protections on Xorg, run paxctl -zpeMRxs /usr/bin/Xorg" ?

Declan Moriarty napisał(a):
> On a linux topic:
> 
> :-(. 
> Apparently I now have DRI on my hardened system with xorg-6.9.0,
> but I can't use it. You may enjoy a laugh at my expense, then dumb
> this down and tell me how to sort it
> 
> glxgears (which ran without DRI and said 335 fps) now gets a swift
> knee in the unmentionables from the kernel
> 
> Jan 31 20:26:45 genius kernel: PAX: execution attempt in:
> >anonymous mapping>, 02e38000-02e58000 02e38000
> Jan 31 20:26:45 genius kernel: PAX: terminating task:
> /usr/X11R6/bin/glxgears(glxgears):14170, uid/euid: 0/0, PC:
> 02e38400, SP: b1f4218c
> Jan 31 20:26:45 genius kernel: PAX: bytes at PC: 55 56 33 c9 8b 6c
> 24 10 3b e9 0f 84 64 00 00 00 8b 44 24 14
> Jan 31 20:26:45 genius kernel: PAX: bytes at SP-4: b1f421e8
> 02cf5eb4
> 13a6f6c8 00000052 a3705000 02cf5cc0 02b84188 02da4844 00000002
> a3705000 13a6f6c8 00000000 13b28e48 13b27980 0c8e4610 00000000
> 00000000 02c1b33e 02def120 00000004 00010000
> Jan 31 20:26:45 genius kernel: grsec: denied resource overstep by
> requesting 4096 for RLIMIT_CORE against limit 0 for
> /usr/X11R6/bin/glxgears[glxgears:14170] uid/euid:0/0 gid/egid:0/0,
> parent /bin/bash[bash:5188] uid/euid:0/0 gid/egid:0/0
> 
> That's a video page, isn't it (4 megs)? Who executes a video page?
> There's plenty og google, but it's programmer jargon or distro
> related. 
> 
> BTW, stellarium suffers a similar fate once it reaches for the
> graphics.
> 
> /Goes away to install pax utilities
> 
> 
> -- 
> 
> 	With best Regards,
> 
> 
> 	Declan Moriarty.
> -- 
> Irish Linux Users' Group mailing list
> Email: ilug at linux.ie
> Options (including unsubscribe) here:
> http://mail.linux.ie/mailman/listinfo/ilug
> 
> 
> 



----------------------------------------------------------------------
Kliknij po wiecej! >>> http://link.interia.pl/f18ed