grsecurity forums

Hello,

I recently upgraded my multimedia box to hlfs, with gcc-ssp and kernel 2.6.11.12 with grsec and pax enabled.
All seems to work with some work only I can't get xine (any version) to play vcd's.
It does play dvd's so it has acces to the drive.
In my log I get:

Aug 12 11:09:39 leffakone kernel: grsec: signal 11 sent to
/usr/bin/xine[xine:8461] uid/euid:1010/1010 gid/egid:110/110, parent
/usr/bin/python[python:27787] uid/euid:1010/1010 gid/egid:110/110
Aug 12 11:09:39 leffakone kernel: grsec: signal 6 sent to
/usr/bin/xine[xine:8461] uid/euid:1010/1010 gid/egid:110/110, parent
/usr/bin/python[python:27787] uid/euid:1010/1010 gid/egid:110/110
Aug 12 11:09:39 leffakone kernel: grsec: denied resource overstep by
requesting 4096 for RLIMIT_CORE against limit 0 for
/usr/bin/xine[xine:8461] uid/euid:1010/1010 gid/egid:110/110, parent
/usr/bin/python[python:27787] uid/euid:1010/1010 gid/egid:110/110

Is there anyone who can help me out on this?

japie wrote:I recently upgraded my multimedia box to hlfs, with gcc-ssp and kernel 2.6.11.12 with grsec and pax enabled.
All seems to work with some work only I can't get xine (any version) to play vcd's..

if you have ASLR enabled, can you turn it off and see if it helps?

PaX Team wrote:if you have ASLR enabled, can you turn it off and see if it helps?

Actualy I have no idea or it helps, after diabling ASLR I get :

Code: Select all

No init found

on my bootscreen, and then the system stops.
Since this didn't went well I tryed disabling options under ASLR and found out that disabling CONFIG_PAX_RANDMAP makes that my kernel can't find init.
The other options didn't make xine work on vcd's, but the above shouldn't happen, does it?
I also tryed all paxctl options on xine, but that didn't "unleash" it either.

japie wrote:Since this didn't went well I tryed disabling options under ASLR and found out that disabling CONFIG_PAX_RANDMAP makes that my kernel can't find init.
The other options didn't make xine work on vcd's, but the above shouldn't happen, does it?

indeed, that's still a bug, at least i know roughly where to look, thanks for the testing.

Uhhhm, what did I test yust yet?
How to make xine play vcd's or where you yust looking for someone to test something dangerous...