Xorg 6.8.2 + kmem + grsecurity (amd64)

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Xorg 6.8.2 + kmem + grsecurity (amd64)

Postby Shapemaker » Wed Mar 23, 2005 2:15 am

I'm having problems using Xorg 6.8.2 with kmem restrictions turned on. 'startx' bails out with the following error message:
Code: Select all
Using vt 7
(EE) ATI(0): Cannot map V_BIOS

Fatal server error:
xf86MapVidMem: Could not mmap framebuffer (0xfb100000,0x1000) (Operation not permitted)

Syslog shows that grsec denies the mmap:
Code: Select all
grsec: denied mmap write of /dev/[k]mem by /usr/bin/Xorg [...] parent /usr/bin/xinit

Kernel config says that kmem can be used with Xorg since writing to video memory is allowed, but that seems not to be the case.

I'm running a dual Opteron (all 64-bit stuff) system with 10 GB RAM & ATI Rage XL motherboard video. Xorg is compiled with dlloader support and works flawlessly with kmem restrictions turned off. I would like to know how to make this particular combination work, since the description in grsec documentation implies it can be done (and it works on a dual Athlon-mp system with identical kernel options where applicable).
Shapemaker
 
Posts: 4
Joined: Wed Feb 16, 2005 10:54 am

Postby spender » Wed Mar 23, 2005 6:56 pm

I'll add code to allow that range in the next release.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to grsecurity support