grsecurity forums

Code: Select all

grsec: denied untrusted exec of /SYSV00000000 by /usr/local/bin/mplayer[mplayer:4535] uid/euid:2560/2560 gid/egid:2560/2560, parent /bin/bash[bash:2209] uid/euid:2560/2560 gid/egid:2560/2560
grsec: signal 11 sent to /usr/local/bin/mplayer[mplayer:4535] uid/euid:2560/2560 gid/egid:2560/2560, parent /bin/bash[bash:2209] uid/euid:2560/2560 gid/egid:2560/2560


and I thought I saw it in some other apps as well.

2.6.13.2 + spender's patch for this kernel, debian unstable

what is the /SYSV00000000 anyway?

/SYSV000000000 is shared memory that was in this case mapped executed by mplayer. It exists in a private namespace, so it's not visible on your filesystem.

-Brad

spender wrote:/SYSV000000000 is shared memory that was in this case mapped executed by mplayer. It exists in a private namespace, so it's not visible on your filesystem.

So mplayer is doing something that requires higher privilages? How to gave them to it - what exacly to type/run/etc?

This particular log has to do with TPE, so you would have to disable TPE for this user.

-Brad