grsecurity forums

Hey.

I've patched linux kernel with grsec under debian wheezy. I followed this guide http://en.wikibooks.org/wiki/Grsecurity. Before menuconfig I copied existing configuration file from /boot/ and used it as starting point. At menuconfig I only enabled grsec with "Automatic>Desktop>Host>EPT/RVI Processor Support>VirtualBox>Performance" options. (I didnt change anything else) After reboot to new kernel I noticed that my nvidia drivers didnt work anymore. Xorg is saying "no screens found" and I got error:

Code: Select all

grsec: denied RWX mprotect of /usr/lib/i386-linux-gnu/libnvidia-glcore.so.304.88 by /usr/bin/Xorg[Xorg:2359] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/xdm[xdm:2295] uid/euid:0/0 gid/egid:0/0
grsec: denied RWX mprotect of /usr/lib/nvidia/current/nvidia_drv.so by /usr/bin/Xorg[Xorg:2359] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/xdm[xdm:2295] uid/euid:0/0 gid/egid:0/0


So, I tried to reinstall them but was unable to get them working. The version of nvidia driver is 304.88.

This is my first time configuring grsecurity and I'm pretty confused. I tried to google this issue but only found patches to other nvidia driver versions. Could someone kindly help me?

-Hillas

did you search the forum for nvidia?

Boot into a non-grsec kernel and install nvidia

Boot into a grsec kernel and build just the kernel module (--kernel-module-only)

Reboot back into the grsec kernel and nvidia should work

This is the only way I have gotten around the RWX issue