Page 1 of 1

Gentoo: ATi binary driver vs. grsecurity

PostPosted: Mon Jan 26, 2009 8:37 pm
by Tommy
Hi,

I have problem with Ati binary driver on my Gentoo ~x86 (hardened gentoo kernel)
On clean/vanilla kernel everythinkg works ok, but on 2.6.28-hardened (vanilla + grsecurity)
I`m always getting black screen and absolute no error messages in xorg.log or by ng-syslog.

Can U help me find option in grsecurity or PaX, that blocks Ati binary driver ?

ps.
I have "kmem restrictions" off

I`m using:
Ati-drivers-8.561
gentoo-hardened-2.6.28 (grsecurity 2.1.12)
xorg-server-1.5.3-r1

Edit: Now I`m runing only grsecurity without PaX and Ati drivers work fine.

Re: Gentoo: ATi binary driver vs. grsecurity

PostPosted: Tue Jan 27, 2009 6:08 pm
by PaX Team
Tommy wrote:Can U help me find option in grsecurity or PaX, that blocks Ati binary driver ?
it's KERNEXEC and UDEREF that trigger two separate bugs in the binary ATI drivers. the first one can be fixed by a binary patch to the driver, but the other one cannot and it may even be security related.