Page 1 of 1
2.6.32.57-grsec bugs
Posted:
Sun Feb 26, 2012 8:41 amby amdfanatyk
Hi,
something was introduced between 2.6.32.36-grsec and 2.6.32.57-grsec that prevents Opera from playing flash movies on sites like gozie.com. It works with 2.6.32.36-grsec (FF & Opera), it doesn't work with 2.6.32.57-grsec (Opera).
Re: 2.6.32.57-grsec bugs
Posted:
Mon Feb 27, 2012 6:12 amby PaX Team
amdfanatyk wrote:It works with 2.6.32.36-grsec (FF & Opera), it doesn't work with 2.6.32.57-grsec (Opera).
is MPROTECT enabled on opera?
Re: 2.6.32.57-grsec bugs
Posted:
Mon Feb 27, 2012 5:31 pmby amdfanatyk
It's disabled. I tried with -pmrxse and -pmrxsE. No luck.
Re: 2.6.32.57-grsec bugs
Posted:
Wed Feb 29, 2012 8:51 amby PaX Team
amdfanatyk wrote:It's disabled. I tried with -pmrxse and -pmrxsE. No luck.
can you double check in /proc/pid/status that PaX is really disabled on the process? also can you try to get some logs with strace -f -ff -o and send them to me please?
Re: 2.6.32.57-grsec bugs
Posted:
Sat Mar 03, 2012 10:48 amby amdfanatyk
- Code: Select all
cc1: warnings being treated as errors
grsecurity/gracl.c: In function ‘__full_lookup’:
grsecurity/gracl.c:1812: warning: passing argument 2 of ‘chk_glob_label’ discards qualifiers from pointer target type
grsecurity/gracl.c:1812: warning: passing argument 3 of ‘chk_glob_label’ discards qualifiers from pointer target type
Re: 2.6.32.57-grsec bugs
Posted:
Sat Mar 03, 2012 11:38 amby amdfanatyk
operapluginswrapper must have MPROTECT disabled in order to work.
Re: 2.6.32.57-grsec bugs
Posted:
Sat Mar 03, 2012 3:17 pmby amdfanatyk
Another interesting thing is the fact that GIMP refused to start (SEGV) but when I did paxctl -c && paxctl -PMRXSe on it, GIMP started cleanly. How binary without paxctl header can get better protection than binary with -PMRXSe?