grsecurity forums

hi,

i compiled my first grsec kernel for a desktop-system. now i have problems to start vmware and openoffice. the system is a debian sid with 2.6.22.6 vanilla kernel and grsecurity-2.1.11-2.6.22.6-200709071800
i got this error messages:
for vmware (translated from german language):

Code: Select all

Sep 24 20:32:52.469: vmui| [localized] VMware Workstation unrecoverable error: (vmui)
Sep 24 20:32:52.469: vmui| SSLLoadSharedLibrary: Failed to load library Cannot make the stack executably as of the Shared Object required: No authorization/usr/lib/vmware/bin/libcrypto.so.0.9.7:/usr/lib/vmware/bin/libcrypto.so.0.9.7:


for openoffice (this could be a bug with selinux):

Code: Select all

terminate called after throwing an instance of 'std::bad_alloc'
  what():  std::bad_alloc
** (process:7829): WARNING **: Unknown error forking main binary / abnormal early exit ...


this is the .config file for my vanilla linux-2.6.22.6:
http://nopaste.debianforum.de/6680

thanks,
regards
michael

atropin wrote:
for vmware (translated from german language):

Code: Select all

Sep 24 20:32:52.469: vmui| [localized] VMware Workstation unrecoverable error: (vmui)
Sep 24 20:32:52.469: vmui| SSLLoadSharedLibrary: Failed to load library Cannot make the stack executably as of the Shared Object required: No authorization/usr/lib/vmware/bin/libcrypto.so.0.9.7:/usr/lib/vmware/bin/libcrypto.so.0.9.7:


Install prelink and paxctl and do

Code: Select all

execstack -c /usr/lib/vmware/bin/libcrypto.so.0.9.7


For more details see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=321721
And don't forget to bug vmware guys :)

atropin wrote:for openoffice (this could be a bug with selinux):

Code: Select all

terminate called after throwing an instance of 'std::bad_alloc'
  what():  std::bad_alloc
** (process:7829): WARNING **: Unknown error forking main binary / abnormal early exit ...


I think this is bug of openoffice itself. For some bizzare reason it wants
to mprotect(PROT_EXEC|PROT_WRITE). Any sane security system will deny that,
so does PAX (and SELinux). As a work around, tell PAX to not restrict
openoffice:

Code: Select all

execstack -c /usr/lib/openoffice/program/libgcc3_uno.so
paxctl -cm /usr/lib/openoffice/program/soffice.bin


and some tools it uses (Java byte-code compiler and libraries):

Code: Select all

execstack -c /usr/lib/libgcj-tools.so.70.0.0
execstack -c /usr/lib/libgcj.so.70.0.0
paxctl -cm /usr/bin/gij-4.1


thats it, now it's working.
thank you!

Alexei.Sheplyakov wrote:I think this is bug of openoffice itself. For some bizzare reason it wants to mprotect(PROT_EXEC|PROT_WRITE).

i took a look at this requirement a while ago and it was in something called the UNO bridge. the code looked complex enough that it wasn't worth more of my time. so it's a feature, however unfortunate and unlikely to be fixed.

i took a look at this requirement a while ago and it was in something called the UNO bridge. the code looked complex enough that it wasn't worth more of my time. so it's a feature, however unfortunate and unlikely to be fixed.

++


and it still happens (with openoffice 2.3.1)

thats it, now it's working.
thank you!

++

thanks a lot Alexei

Does anyone know how to deal with OO 3.0. I tried above but with no success. In my case every OO version newer that 2.1 crashes at shutdown with SIGABRT.

Code: Select all

./soffice.bin
terminate called after throwing an instance of 'std::bad_alloc'
  what():  St9bad_alloc
KCrash: crashing... crashRecursionCounter = 2
KCrash: Application Name = soffice.bin path = <unknown> pid = 18289


Code: Select all

(no debugging symbols found)
Using host libthread_db library "/lib/libthread_db.so.1".
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
[New Thread -1247062352 (LWP 19955)]
[New Thread -1311290448 (LWP 19969)]
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[KCrash handler]
#5  0xb7984210 in raise () from /lib/libc.so.6
#6  0xb79855ec in abort () from /lib/libc.so.6
#7  0xb7b5cad1 in __gnu_cxx::__verbose_terminate_handler ()
   from /opt/openoffice.org3/program/../basis-link/ure-link/lib/libstdc++.so.6
#8  0xb7b5a505 in __cxa_call_unexpected ()
   from /opt/openoffice.org3/program/../basis-link/ure-link/lib/libstdc++.so.6
#9  0xb7b5a542 in std::terminate ()
   from /opt/openoffice.org3/program/../basis-link/ure-link/lib/libstdc++.so.6
#10 0xb7b5a6d2 in __cxa_throw ()
   from /opt/openoffice.org3/program/../basis-link/ure-link/lib/libstdc++.so.6
#11 0x08048ec4 in main ()