PHP: denied RWX mmap of <anonymous mapping>

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

PHP: denied RWX mmap of <anonymous mapping>

Postby Nicolas » Sun Jul 17, 2016 10:44 am

Hi everyone,

I have a long time problem in my logs (I have always had this problem, even with PHP5).

This message keeps showing in my kernel logs and in local terminal :
grsec: denied RWX mmap of <anonymous mapping> by /usr/sbin/php-fpm7.0[php-fpm7.0:30489] uid/euid:1015/1015 gid/egid:33/33, parent /usr/sbin/php-fpm7.0[php-fpm7.0:30476] uid/euid:0/0 gid/egid:0/0



Everything is working perfectly, PHP-FPM never crashes or never block any app.
I haven't applied any specific paxctl flags on the executable.

Any idea how to get rid of this?

My system :
- Debian 8 x64
- Kernel 4.6.4 (https://abyssproject.net/debian-grsecurity-kernels/)
- PHP 7.0.8-1~dotdeb+8.1


Thanks in advance.

BR,
Nicolas
Nicolas
 
Posts: 4
Joined: Fri Apr 08, 2016 9:49 am

Re: PHP: denied RWX mmap of <anonymous mapping>

Postby timbgo » Thu Jul 21, 2016 12:11 pm

I most often can't figure out how to fix such messages (I have some, just with python3.4 today instead of php...), but I wanted to say how glad I am to see:.
Nicolas wrote:...

My system :
- Debian 8 x64
- Kernel 4.6.4 (https://abyssproject.net/debian-grsecurity-kernels/)
- PHP 7.0.8-1~dotdeb+8.1


that grsecurity is made even easier to deploy on Debian (and derivatives), as it should be!

Regarding the messages, they look bad, but I think they are not necessarily a problem. What it you had Firefox (and other programs) constantly "denied connect() ... to port 0/udp" and stuff, like here :evil: ...

Regards!
timbgo
 
Posts: 295
Joined: Tue Apr 16, 2013 9:34 am


Return to grsecurity support

cron