Pulseaudio breaks with sysfs/debugfs restrictions + PaX Flag

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Pulseaudio breaks with sysfs/debugfs restrictions + PaX Flag

Postby GBit » Fri Dec 14, 2012 4:17 am

So on Ubuntu 12.10 Pulseaudio runs but sound doesn't seem to work when sysfs/debugfs restrictions are enabled. Any way around this or is it just Pulseaudio's fault?

Another question about the behavior of pax flags. If I disable soft mode the entire system runs with PaX. But, is it possible to run the entire system with PaX and then still use paxctl/flags to disable features on a per-program basis?
GBit
 
Posts: 81
Joined: Mon Jun 04, 2012 3:31 pm

Re: Pulseaudio breaks with sysfs/debugfs restrictions + PaX

Postby spender » Fri Dec 14, 2012 8:13 am

CONFIG_GRKERNSEC_SYSFS_RESTRICT is not recommended for desktop environments -- it is only automatically enabled via a "server" configuration setting.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Re: Pulseaudio breaks with sysfs/debugfs restrictions + PaX

Postby PaX Team » Fri Dec 14, 2012 8:44 am

GBit wrote:But, is it possible to run the entire system with PaX and then still use paxctl/flags to disable features on a per-program basis?
that's what paxctl/setfattr/RBAC are for ;).
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: Pulseaudio breaks with sysfs/debugfs restrictions + PaX

Postby GBit » Fri Dec 14, 2012 11:41 pm

Got it, thanks.
GBit
 
Posts: 81
Joined: Mon Jun 04, 2012 3:31 pm


Return to grsecurity support