PaX and RLIMIT_AS

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

PaX and RLIMIT_AS

Postby Napfi » Mon Jul 22, 2013 9:03 am

Hi,
we are using Kernel 3.7.9 with grsec patch. Now we experience problems with an application that sets RLIMIT_AS. In "top" or /proc/PID/status a VMSIZE of around 80 MB is reported. However, if we start with pax_softmode=1, size is reported with about 9 MB. Even though the documentation states that RLIMIT_AS refers to the virtual memory space used, I expect that it's more the highest address allowed to use. Due to address space layout randomization in PaX, memory areas can very well lie beyond address [RLIMIT_AS]. I kernel and tools expect that address space is used linear from lowest to highest address, this might explain, why VMSIZE is reported wrongly with PaX enabled. Could you confirm my assumption? If not, what could cause these weird VMSIZE reportings?

Regards, Martin
Napfi
 
Posts: 1
Joined: Mon Jul 22, 2013 8:41 am

Re: PaX and RLIMIT_AS

Postby PaX Team » Wed Jul 24, 2013 5:50 pm

RLIMIT_AS specifies the amount of virtual memory that a process can map, not the highest mappable address (the latter cannot be controlled by userland, it's a kernel invariant). as for RLIMIT_AS and ASLR interference, you should try a newer kernel as we've fixed some issues since.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm


Return to grsecurity support