grsecurity forums

Hi,

I got this error:

Code: Select all

Rode@server1:~/CSS$ ./srcds_run -game cstrike +map de_dust2 +maxplayers 10 -port 27015 -tickrate 100 +ip 80.**.87.** -pingboost 2 -autoupdate
Auto detecting CPU
Using AMD-Opteron (64 bit) Optimised binary.
Auto-restarting the server on crash
Updating server using Steam.
Checking bootstrapper version ...
Updating Installation
This Linux installation is unsupported. You must have GLIBC 2.3.2 or higher.
Please update your installation to a more recent version.
 For more information visit http://support.steampowered.com
Err: ./test1.so: cannot make segment writable for relocation: Permission denied
So Mär 18 19:48:27 CET 2007: Steam Update failed, ignoring.
Failed to open bin/dedicated_amd.so (bin/vstdlib_i486.so: cannot make segment writable for relocation: Permission denied)
Add "-debug" to the ./srcds_run command line to generate a debug.log to help with solving this problem
So Mär 18 19:48:27 CET 2007: Server restart in 10 seconds
So Mär 18 19:48:37 CET 2007: Server Quit


Which Commands should I use? I used chpax -m but it won't!

Cheers.

Hello again,

My teamspeak server crashes to (yeah I know I should use chpax -sp but it won't)

Code: Select all

Rode@server1:~/TS2/tss2_rc2$ ./*start* start
starting the teamspeak2 server
Runtime error   0 at FFBF80B8
./teamspeak2-server_startscript: line 94: 15952 Speicherzugriffsfehler  ./server_linux -PID=tsserver2.pid

Logs:

Code: Select all

Mar 18 20:12:59 server1 kernel: PAX: From 82.83.221.22: execution attempt in: /home/Rode/TS2/tss2_rc2/server_linux, 08218000-08230000 000cf000
Mar 18 20:12:59 server1 kernel: PAX: terminating task: /home/Rode/TS2/tss2_rc2/server_linux(server_linux):13428, uid/euid: 1008/1008, PC: 000000000821bc57, SP: 00000000f9ece4a0
Mar 18 20:12:59 server1 kernel: PAX: bytes at PC: 83 44 24 04 dc e9 33 3d e3 ff 83 44 24 04 dc e9 3d 3d e3 ff
Mar 18 20:12:59 server1 kernel: PAX: bytes at SP-8: 0810695c0805afab 0824dbec0804f884 0824dbec08230514 f9ece4d008073996 0000000d0804c72b f9ece6b40804c7f4 0810695400000002 0804c870f9ece4d8 08053560f9ece628 08106cbcf9ece6b4 f9ece6c000000000

How can I resolve this?

Cheers.

Make sure you chpax -m the correct binary, in your case the amd. It works fine for me.

i think you should chpax amd_dedicated.so

systray` wrote:How can I resolve this?

if you had bothered to search the forum, you'd have found http://forums.grsecurity.net/viewtopic.php?t=698 where it was explained.

harrygittens wrote:i think you should chpax amd_dedicated.so

no he shouldn't, PaX flags on libraries are useless, it's the main executable that matters (think about how easily the protection could be switched off by merely mmap'ing a chpax'd library...).

ok. i am not expert. sorry

Code: Select all

server1:/home/Mode/TS2/tss2_rc2# chpax -sp server_linux
server1:/home/Mode/TS2/tss2_rc2# ./server_linux
Runtime error 234 at 0804CDF3
server1:/home/Mode/TS2/tss2_rc2#


It don't take a effect...

Cheers

systray` wrote:

Code: Select all

server1:/home/Mode/TS2/tss2_rc2# chpax -sp server_linux
server1:/home/Mode/TS2/tss2_rc2# ./server_linux
Runtime error 234 at 0804CDF3
server1:/home/Mode/TS2/tss2_rc2#


It don't take a effect...

Cheers

what PaX flag control method did you enable in .config? and what PaX logs do you get after chpax?

systray, you need to chpax the binary (srcds_amd), it doesn't work on a script.

PaX Team wrote:

systray` wrote:

Code: Select all

server1:/home/Mode/TS2/tss2_rc2# chpax -sp server_linux
server1:/home/Mode/TS2/tss2_rc2# ./server_linux
Runtime error 234 at 0804CDF3
server1:/home/Mode/TS2/tss2_rc2#


It don't take a effect...

Cheers

what PaX flag control method did you enable in .config? and what PaX logs do you get after chpax?

I got a RLIMIT Error.
My Kernelconfig:

Code: Select all

CONFIG_PAX=y
# CONFIG_PAX_SOFTMODE is not set
CONFIG_PAX_EI_PAX=y
CONFIG_PAX_PT_PAX_FLAGS=y
CONFIG_PAX_NO_ACL_FLAGS=y
# CONFIG_PAX_HAVE_ACL_FLAGS is not set
# CONFIG_PAX_HOOK_ACL_FLAGS is not set
CONFIG_PAX_NOEXEC=y
CONFIG_PAX_PAGEEXEC=y
CONFIG_PAX_MPROTECT=y
CONFIG_PAX_NOELFRELOCS=y
CONFIG_PAX_ASLR=y
CONFIG_PAX_RANDUSTACK=y
CONFIG_PAX_RANDMMAP=y
CONFIG_PAX_MEMORY_SANITIZE=y
CONFIG_GRKERNSEC=y
# CONFIG_GRKERNSEC_LOW is not set
# CONFIG_GRKERNSEC_MEDIUM is not set
CONFIG_GRKERNSEC_HIGH=y
# CONFIG_GRKERNSEC_CUSTOM is not set
CONFIG_GRKERNSEC_KMEM=y
# CONFIG_GRKERNSEC_IO is not set
CONFIG_GRKERNSEC_PROC_MEMMAP=y
CONFIG_GRKERNSEC_BRUTE=y
CONFIG_GRKERNSEC_HIDESYM=y
CONFIG_GRKERNSEC_ACL_HIDEKERN=y
CONFIG_GRKERNSEC_ACL_MAXTRIES=3
CONFIG_GRKERNSEC_ACL_TIMEOUT=30
CONFIG_GRKERNSEC_PROC=y
CONFIG_GRKERNSEC_PROC_USER=y
CONFIG_GRKERNSEC_PROC_USERGROUP=y
CONFIG_GRKERNSEC_PROC_GID=1001
CONFIG_GRKERNSEC_PROC_ADD=y
CONFIG_GRKERNSEC_LINK=y
CONFIG_GRKERNSEC_FIFO=y
CONFIG_GRKERNSEC_CHROOT=y
CONFIG_GRKERNSEC_CHROOT_MOUNT=y
CONFIG_GRKERNSEC_CHROOT_DOUBLE=y
CONFIG_GRKERNSEC_CHROOT_PIVOT=y
CONFIG_GRKERNSEC_CHROOT_CHDIR=y
CONFIG_GRKERNSEC_CHROOT_CHMOD=y
CONFIG_GRKERNSEC_CHROOT_FCHDIR=y
CONFIG_GRKERNSEC_CHROOT_MKNOD=y
CONFIG_GRKERNSEC_CHROOT_SHMAT=y
CONFIG_GRKERNSEC_CHROOT_UNIX=y
CONFIG_GRKERNSEC_CHROOT_FINDTASK=y
CONFIG_GRKERNSEC_CHROOT_NICE=y
CONFIG_GRKERNSEC_CHROOT_SYSCTL=y
CONFIG_GRKERNSEC_CHROOT_CAPS=y
# CONFIG_GRKERNSEC_AUDIT_GROUP is not set
# CONFIG_GRKERNSEC_EXECLOG is not set
CONFIG_GRKERNSEC_RESLOG=y
# CONFIG_GRKERNSEC_CHROOT_EXECLOG is not set
# CONFIG_GRKERNSEC_AUDIT_CHDIR is not set
CONFIG_GRKERNSEC_AUDIT_MOUNT=y
# CONFIG_GRKERNSEC_AUDIT_IPC is not set
CONFIG_GRKERNSEC_SIGNAL=y
CONFIG_GRKERNSEC_FORKFAIL=y
CONFIG_GRKERNSEC_TIME=y
CONFIG_GRKERNSEC_PROC_IPADDR=y
# CONFIG_GRKERNSEC_AUDIT_TEXTREL is not set
CONFIG_GRKERNSEC_EXECVE=y
CONFIG_GRKERNSEC_SHM=y
CONFIG_GRKERNSEC_DMESG=y
# CONFIG_GRKERNSEC_TPE is not set


Cheers.

systray` wrote:I got a RLIMIT Error.

i guess you mean the coredump related log. since you don't seem to be getting any PaX kill logs, it's more likely an application bug, you'd have to debug it to see where and why it crashes. as a blind shot, try to disable randomization on it as well, maybe it's picky about it for some reason.