grsecurity forums

Hello,

I've got 2.6.14.3 with grsec/pax enabled on my freevo box.
When starting a movie within freevo I get:
Nov 28 11:13:24 leffakone kernel: PAX: VMMIRROR: fault bug2, 5b595bcc, 5b595000, bb5f8000, 5b60d000, bb60d000
Nov 28 11:13:24 leffakone kernel: grsec: From 192.168.0.14: signal 7 sent to /usr/bin/mplayer[mplayer:24766] uid/euid:1010/1010 gid/egid:110/110, parent /usr/bin/python[python:158 17] uid/euid:1010/1010 gid/egid:110/110
Nov 28 11:13:24 leffakone kernel: PAX: VMMIRROR: fault bug2, 5b5958f0, 5b595000, bb5f8000, 5b60d000, bb60d000
Nov 28 11:13:24 leffakone kernel: grsec: From 192.168.0.14: signal 11 sent to /usr/bin/mplayer[mplayer:24766] uid/euid:1010/1010 gid/egid:110/110, parent /usr/bin/python[python:15 817] uid/euid:1010/1010 gid/egid:110/110
Nov 28 11:13:24 leffakone kernel: PAX: VMMIRROR: fault bug2, 5b5958f0, 5b595000, bb5f8000, 5b60d000, bb60d000
Nov 28 11:13:24 leffakone kernel: grsec: From 192.168.0.14: signal 11 sent to /usr/bin/mplayer[mplayer:24766] uid/euid:1010/1010 gid/egid:110/110, parent /usr/bin/python[python:15 817] uid/euid:1010/1010 gid/egid:110/110
Nov 28 11:13:24 leffakone kernel: grsec: From 192.168.0.14: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/bin/mplayer[mplayer:24766] uid/eui d:1010/1010 gid/egid:110/110, parent /usr/bin/python[python:15817] uid/euid:1010/1010 gid/egid:110/110

But when login as user 110 I can play with mplayer yust fine.
I added that user to the trusted tpe_gid group but that doesn't help.
On my previous 2.6.13 kernel all was fine, is there something changed?

japie wrote:Nov 28 11:13:24 leffakone kernel: PAX: VMMIRROR: fault bug2, 5b595bcc, 5b595000, bb5f8000, 5b60d000, bb60d000
Nov 28 11:13:24 leffakone kernel: grsec: From 192.168.0.14: signal 7 sent to /usr/bin/mplayer[mplayer:24766] uid/euid:1010/1010 gid/egid:110/110, parent /usr/bin/python[python:158 17] uid/euid:1010/1010 gid/egid:110/110

But when login as user 110 I can play with mplayer yust fine.
I added that user to the trusted tpe_gid group but that doesn't help.
On my previous 2.6.13 kernel all was fine, is there something changed?

hmm, not normal for sure. i just uploaded a new PaX test patch (test11), can you give it a try? if it still fails, can you email me your .config (all of it, not only the PaX bits) and an strace -f output (it may be better to log into per process files via -ff -o, as i'm interested in only mplayer, not python/etc)?

PaX Team wrote:i just uploaded a new PaX test patch (test11), can you give it a try? if it still fails, can you email me your .config

I replyed to this at pageexec at freemail.hu, hope to hear from you...

japie wrote:I replyed to this at pageexec at freemail.hu, hope to hear from you...

latest PaX and grsecurity patches fix the problem, thanks to japie for help in debugging it.