grsecurity on desktop (playing movies)
Posted: Thu Oct 06, 2005 4:07 am
[4343434.345000] grsec: denied resource overstep by requesting 16781268 for RLIMIT_CORE against limit 16777216 for /usr/bin/btdownloadgui.bittornado[btdownloadgui:27473] uid/euid:2560/2560 gid/egid:2560/2560, parent /usr/bin/kdeinit[kdeinit:26830] uid/euid:2560/2560 gid/egid:2560/2560
[4344182.658000] grsec: signal 11 sent to /usr/bin/xine[xine:11720] uid/euid:2560/2560 gid/egid:2560/2560, parent /usr/bin/kdeinit[kdeinit:26830] uid/euid:2560/2560 gid/egid:2560/2560
[4344182.658000] grsec: signal 6 sent to /usr/bin/xine[xine:11720] uid/euid:2560/2560 gid/egid:2560/2560, parent /usr/bin/kdeinit[kdeinit:26830] uid/euid:2560/2560 gid/egid:2560/2560
How to fix the following
[4344183.033000] grsec: denied resource overstep by requesting 16779412 for RLIMIT_CORE against limit 16777216 for /usr/bin/xine[xine:11720] uid/euid:2560/2560 gid/egid:2560/2560, parent /usr/bin/kdeinit[kdeinit:26830] uid/euid:2560/2560 gid/egid:2560/2560
what limit should I increase, to allow the program above, when runned by user with UID=2560 "Raf256", to use in example twice as big RLIMIT_CORE? (and is it any security risk on 1 GB 2800 amd64)
[4344216.958000] grsec: denied untrusted exec of /SYSV00000000 by /usr/local/bin/mplayer[mplayer:28507] uid/euid:2560/2560 gid/egid:2560/2560, parent /bin/bash[bash:20945] uid/euid:2560/2560 gid/egid:2560/2560
I quess it's mplayer trying to load some dynaimc code for windows codec? how to allow this program, runned by that user, to do so? and how to make it as secure as possible?
[4344216.958000] grsec: signal 11 sent to /usr/local/bin/mplayer[mplayer:28507] uid/euid:2560/2560 gid/egid:2560/2560, parent /bin/bash[bash:20945] uid/euid:2560/2560 gid/egid:2560/2560
[4344182.658000] grsec: signal 11 sent to /usr/bin/xine[xine:11720] uid/euid:2560/2560 gid/egid:2560/2560, parent /usr/bin/kdeinit[kdeinit:26830] uid/euid:2560/2560 gid/egid:2560/2560
[4344182.658000] grsec: signal 6 sent to /usr/bin/xine[xine:11720] uid/euid:2560/2560 gid/egid:2560/2560, parent /usr/bin/kdeinit[kdeinit:26830] uid/euid:2560/2560 gid/egid:2560/2560
How to fix the following
[4344183.033000] grsec: denied resource overstep by requesting 16779412 for RLIMIT_CORE against limit 16777216 for /usr/bin/xine[xine:11720] uid/euid:2560/2560 gid/egid:2560/2560, parent /usr/bin/kdeinit[kdeinit:26830] uid/euid:2560/2560 gid/egid:2560/2560
what limit should I increase, to allow the program above, when runned by user with UID=2560 "Raf256", to use in example twice as big RLIMIT_CORE? (and is it any security risk on 1 GB 2800 amd64)
[4344216.958000] grsec: denied untrusted exec of /SYSV00000000 by /usr/local/bin/mplayer[mplayer:28507] uid/euid:2560/2560 gid/egid:2560/2560, parent /bin/bash[bash:20945] uid/euid:2560/2560 gid/egid:2560/2560
I quess it's mplayer trying to load some dynaimc code for windows codec? how to allow this program, runned by that user, to do so? and how to make it as secure as possible?
[4344216.958000] grsec: signal 11 sent to /usr/local/bin/mplayer[mplayer:28507] uid/euid:2560/2560 gid/egid:2560/2560, parent /bin/bash[bash:20945] uid/euid:2560/2560 gid/egid:2560/2560