Page 1 of 1

grsec: denied RWX mprotect libcrypto

PostPosted: Thu Mar 22, 2012 1:41 pm
by specs
After an upgrade of the usual packages I found the following in my logs (Debian Unstable):
Code: Select all
grsec: denied RWX mprotect of /usr/lib/i386-linux-gnu/i686/cmov/libcrypto.so.1.0.0 by /usr/bin/pycompile[pycompile:30503] uid/euid:0/0 gid/egid:0/0, parent /var/lib/dpkg/info/gimp.postinst[gimp.postinst:30501] uid/euid:0/0 gid/egid:0/0

I thought this was an isolated problem, therefore I tried a few things to fix the immediate problems when I found I could not ssh to another pc. From a (luckily) open session I found this pc suffered from the same problem (Debian Testing). Unluckily I found almost all services were suffering similar problems with libcrypto.

Are other people also suffering from the openssl-1.0.0h upgrade?
One pc was running grsecurity-2.9-3.2.12-201203201932, the other grsecurity-2.9-2.6.32.58-201203162123.

Re: grsec: denied RWX mprotect libcrypto

PostPosted: Thu Mar 22, 2012 3:41 pm
by Lox

Re: grsec: denied RWX mprotect libcrypto

PostPosted: Thu Mar 22, 2012 4:54 pm
by specs
While it is most irritating on the testing installation, the unstable installation already uses the latest version (1.0.1-2), which still exhibits the problem.