grsecurity forums

Hello,

I have a problem with xinit (lxpanel LXDE), segfault....

When I'm trying to start lxde as root user there is no problem.

But when I try with any other user i have this problem :

Code: Select all

Feb  7 19:38:22 iKPB kernel: [    5.513677] usb 4-4: New USB device found, idVendor=0557, idProduct=8021
Feb  7 19:38:22 iKPB kernel: [    5.513684] usb 4-4: New USB device strings: Mfr=0, Product=0, SerialNumber=0
Feb  7 19:38:22 iKPB kernel: [    5.513928] usb 4-4: ep 0x81 - rounding interval to 1024 microframes, ep desc says 2040 microframes
Feb  7 19:38:22 iKPB kernel: [    5.514232] hub 4-4:1.0: USB hub found
Feb  7 19:38:22 iKPB kernel: [    5.514337] hub 4-4:1.0: 4 ports detected
Feb  7 19:38:22 iKPB kernel: [    5.779919] usb 4-4.1: new low-speed USB device number 4 using xhci_hcd
Feb  7 19:38:22 iKPB kernel: [    5.865825] usb 4-4.1: New USB device found, idVendor=0557, idProduct=2261
Feb  7 19:38:22 iKPB kernel: [    5.865833] usb 4-4.1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
Feb  7 19:38:22 iKPB kernel: [    5.865838] usb 4-4.1: Product: CS1716A V1.6.151
Feb  7 19:38:22 iKPB kernel: [    5.865842] usb 4-4.1: Manufacturer: ATEN International Co. Ltd
Feb  7 19:38:22 iKPB kernel: [    5.866043] usb 4-4.1: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
Feb  7 19:38:22 iKPB kernel: [    5.866052] usb 4-4.1: ep 0x82 - rounding interval to 64 microframes, ep desc says 80 microframes
Feb  7 19:38:22 iKPB kernel: [    5.866059] usb 4-4.1: ep 0x83 - rounding interval to 32 microframes, ep desc says 40 microframes
Feb  7 19:38:22 iKPB kernel: [    5.866065] usb 4-4.1: ep 0x84 - rounding interval to 64 microframes, ep desc says 80 microframes
Feb  7 19:38:22 iKPB kernel: [    5.883985] input: ATEN International Co. Ltd CS1716A V1.6.151 as /devices/pci0000:00/0000:00:14.0/usb4/4-4/4-4.1/4-4.1:1.0/input/input1
Feb  7 19:38:22 iKPB kernel: [    5.884249] generic-usb 0003:0557:2261.0001: input,hidraw0: USB HID v1.00 Keyboard [ATEN International Co. Ltd CS1716A V1.6.151] on usb-0000:00:14.0-4.1/input0
Feb  7 19:38:22 iKPB kernel: [    5.910651] input: ATEN International Co. Ltd CS1716A V1.6.151 as /devices/pci0000:00/0000:00:14.0/usb4/4-4/4-4.1/4-4.1:1.1/input/input2
Feb  7 19:38:22 iKPB kernel: [    5.910835] generic-usb 0003:0557:2261.0002: input,hidraw1: USB HID v1.00 Device [ATEN International Co. Ltd CS1716A V1.6.151] on usb-0000:00:14.0-4.1/input1
Feb  7 19:38:22 iKPB kernel: [    5.931778] input: ATEN International Co. Ltd CS1716A V1.6.151 as /devices/pci0000:00/0000:00:14.0/usb4/4-4/4-4.1/4-4.1:1.2/input/input3
Feb  7 19:38:22 iKPB kernel: [    5.932128] generic-usb 0003:0557:2261.0003: input,hidraw2: USB HID v1.10 Mouse [ATEN International Co. Ltd CS1716A V1.6.151] on usb-0000:00:14.0-4.1/input2
Feb  7 19:38:22 iKPB kernel: [    5.952672] input: ATEN International Co. Ltd CS1716A V1.6.151 as /devices/pci0000:00/0000:00:14.0/usb4/4-4/4-4.1/4-4.1:1.3/input/input4
Feb  7 19:38:22 iKPB kernel: [    5.953034] generic-usb 0003:0557:2261.0004: input,hidraw3: USB HID v1.10 Mouse [ATEN International Co. Ltd CS1716A V1.6.151] on usb-0000:00:14.0-4.1/input3
Feb  7 19:38:22 iKPB kernel: [    9.803974] EXT4-fs (sda2): re-mounted. Opts: (null)
Feb  7 19:38:22 iKPB kernel: [   10.034977] EXT4-fs (sda7): mounted filesystem with ordered data mode. Opts: (null)
Feb  7 19:38:22 iKPB kernel: [   10.068776] EXT4-fs (sda6): mounted filesystem with ordered data mode. Opts: (null)
Feb  7 19:38:22 iKPB kernel: [   10.106928] EXT4-fs (sda3): mounted filesystem with ordered data mode. Opts: (null)
Feb  7 19:38:22 iKPB kernel: [   10.346953] Adding 4095996k swap on /dev/sda5.  Priority:-1 extents:1 across:4095996k
Feb  7 19:38:22 iKPB kernel: [   13.508729] e1000e: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx
Feb  7 19:38:22 iKPB kernel: [   17.108733] tg3 0000:03:00.0: eth1: Link is up at 100 Mbps, full duplex
Feb  7 19:38:22 iKPB kernel: [   17.108741] tg3 0000:03:00.0: eth1: Flow control is on for TX and on for RX
Feb  7 19:38:22 iKPB kernel: [   17.108746] tg3 0000:03:00.0: eth1: EEE is disabled
Feb  7 19:38:22 iKPB kernel: [   19.870588] ip used greatest stack depth: 5848 bytes left
Feb  7 19:38:22 iKPB kernel: [   21.441627] tg3 0000:03:00.1: eth2: Link is up at 100 Mbps, full duplex
Feb  7 19:38:22 iKPB kernel: [   21.441635] tg3 0000:03:00.1: eth2: Flow control is off for TX and off for RX
Feb  7 19:38:22 iKPB kernel: [   21.441640] tg3 0000:03:00.1: eth2: EEE is disabled
Feb  7 19:51:43 iKPB init: tty (/dev/tty1) main process ended, respawning
Feb  7 19:51:48 iKPB kernel: [  828.050139] grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 0 for /usr/bin/xinit[xinit:3324] uid/euid:500/500 gid/egid:500/500, parent /usr/bin/startx[startx:3308] uid/euid:500/500 gid/egid:500/500
Feb  7 19:51:52 iKPB kernel: [  831.994002] lxpanel[3345]: segfault at 0 ip b6dd3175 sp bfbe5980 error 4 in libc-2.12.so[b6d72000+191000]
Feb  7 19:51:52 iKPB kernel: [  831.994022] grsec: Segmentation fault occurred at    (nil) in /usr/bin/lxpanel[lxpanel:3345] uid/euid:500/500 gid/egid:500/500, parent /usr/bin/lxsession[lxsession:3338] uid/euid:500/500 gid/egid:500/500
Feb  7 19:51:52 iKPB kernel: [  832.018447] lxpanel[3356]: segfault at 0 ip b6d46175 sp bfa64980 error 4 in libc-2.12.so[b6ce5000+191000]
Feb  7 19:51:52 iKPB kernel: [  832.018459] grsec: Segmentation fault occurred at    (nil) in /usr/bin/lxpanel[lxpanel:3356] uid/euid:500/500 gid/egid:500/500, parent /usr/bin/lxsession[lxsession:3338] uid/euid:500/500 gid/egid:500/500
Feb  7 19:51:53 iKPB kernel: [  832.726261] lxpanel used greatest stack depth: 5508 bytes left
Feb  7 19:51:53 iKPB kernel: [  832.947456] lxpanel[3360]: segfault at 0 ip b6dd0175 sp bff38980 error 4 in libc-2.12.so[b6d6f000+191000]
Feb  7 19:51:53 iKPB kernel: [  832.947490] grsec: Segmentation fault occurred at    (nil) in /usr/bin/lxpanel[lxpanel:3360] uid/euid:500/500 gid/egid:500/500, parent /usr/bin/lxsession[lxsession:3338] uid/euid:500/500 gid/egid:500/500
Feb  7 19:51:53 iKPB kernel: [  833.184505] lxpanel[3362]: segfault at 0 ip b6d4a175 sp bfcbd980 error 4 in libc-2.12.so[b6ce9000+191000]
Feb  7 19:51:53 iKPB kernel: [  833.184539] grsec: Segmentation fault occurred at    (nil) in /usr/bin/lxpanel[lxpanel:3362] uid/euid:500/500 gid/egid:500/500, parent /usr/bin/lxsession[lxsession:3338] uid/euid:500/500 gid/egid:500/500
Feb  7 19:51:54 iKPB kernel: [  833.455325] lxpanel[3364]: segfault at 0 ip b6cf5175 sp bfb47980 error 4 in libc-2.12.so[b6c94000+191000]
Feb  7 19:51:54 iKPB kernel: [  833.455359] grsec: Segmentation fault occurred at    (nil) in /usr/bin/lxpanel[lxpanel:3364] uid/euid:500/500 gid/egid:500/500, parent /usr/bin/lxsession[lxsession:3338] uid/euid:500/500 gid/egid:500/500
Feb  7 19:51:54 iKPB kernel: [  833.682896] lxpanel[3366]: segfault at 0 ip b6db2175 sp bfb86980 error 4 in libc-2.12.so[b6d51000+191000]
Feb  7 19:51:54 iKPB kernel: [  833.682930] grsec: Segmentation fault occurred at    (nil) in /usr/bin/lxpanel[lxpanel:3366] uid/euid:500/500 gid/egid:500/500, parent /usr/bin/lxsession[lxsession:3338] uid/euid:500/500 gid/egid:500/500
Feb  7 19:51:54 iKPB kernel: [  833.911908] lxpanel[3368]: segfault at 0 ip b6d8f175 sp bfefd980 error 4 in libc-2.12.so[b6d2e000+191000]
Feb  7 19:51:54 iKPB kernel: [  833.911928] grsec: more alerts, logging disabled for 10 seconds
Feb  7 19:51:54 iKPB kernel: [  834.182889] lxpanel[3370]: segfault at 0 ip b6d41175 sp bfc50980 error 4 in libc-2.12.so[b6ce0000+191000]
Feb  7 19:51:55 iKPB kernel: [  834.410937] lxpanel[3372]: segfault at 0 ip b6dda175 sp bfc53980 error 4 in libc-2.12.so[b6d79000+191000]
Feb  7 19:51:55 iKPB kernel: [  834.619098] lxpanel[3374]: segfault at 0 ip b6d18175 sp bfa7a980 error 4 in libc-2.12.so[b6cb7000+191000]
Feb  7 19:51:57 iKPB kernel: [  837.016562] show_signal_msg: 25 callbacks suppressed
Feb  7 19:51:57 iKPB kernel: [  837.016621] lxpanel[3427]: segfault at 0 ip b6de3175 sp bfd30980 error 4 in libc-2.12.so[b6d82000+191000]
Feb  7 19:51:57 iKPB kernel: [  837.095685] lxpanel[3429]: segfault at 0 ip b6d21175 sp bff4c980 error 4 in libc-2.12.so[b6cc0000+191000]
Feb  7 19:51:57 iKPB kernel: [  837.176360] lxpanel[3431]: segfault at 0 ip b6da0175 sp bfcf4980 error 4 in libc-2.12.so[b6d3f000+191000]
Feb  7 19:51:58 iKPB kernel: [  837.256157] lxpanel[3433]: segfault at 0 ip b6d01175 sp bf9c7980 error 4 in libc-2.12.so[b6ca0000+191000]
Feb  7 19:51:58 iKPB kernel: [  837.335184] lxpanel[3435]: segfault at 0 ip b6da2175 sp bfd7b980 error 4 in libc-2.12.so[b6d41000+191000]
Feb  7 19:51:58 iKPB kernel: [  837.415269] lxpanel[3437]: segfault at 0 ip b6d86175 sp bf841980 error 4 in libc-2.12.so[b6d25000+191000]
Feb  7 19:51:58 iKPB kernel: [  837.493917] lxpanel[3439]: segfault at 0 ip b6d6f175 sp bf91d980 error 4 in libc-2.12.so[b6d0e000+191000]
Feb  7 19:51:58 iKPB kernel: [  837.572504] lxpanel[3441]: segfault at 0 ip b6d32175 sp bfa43980 error 4 in libc-2.12.so[b6cd1000+191000]
Feb  7 19:51:58 iKPB kernel: [  837.652269] lxpanel[3443]: segfault at 0 ip b6d48175 sp bff3d980 error 4 in libc-2.12.so[b6ce7000+191000]
Feb  7 19:51:58 iKPB kernel: [  837.730625] lxpanel[3445]: segfault at 0 ip b6d90175 sp bfbf5980 error 4 in libc-2.12.so[b6d2f000+191000]
Feb  7 19:52:02 iKPB kernel: [  842.173631] show_signal_msg: 55 callbacks suppressed
Feb  7 19:52:02 iKPB kernel: [  842.173781] lxpanel[3559]: segfault at 0 ip b6cfc175 sp bf800980 error 4 in libc-2.12.so[b6c9b000+191000]
Feb  7 19:52:03 iKPB kernel: [  842.253518] lxpanel[3561]: segfault at 0 ip b6dee175 sp bff54980 error 4 in libc-2.12.so[b6d8d000+191000]
Feb  7 19:52:03 iKPB kernel: [  842.334069] lxpanel[3563]: segfault at 0 ip b6d2b175 sp bfd02980 error 4 in libc-2.12.so[b6cca000+191000]
Feb  7 19:52:03 iKPB kernel: [  842.415659] lxpanel[3565]: segfault at 0 ip b6d38175 sp bf81c980 error 4 in libc-2.12.so[b6cd7000+191000]
Feb  7 19:52:03 iKPB kernel: [  842.495996] lxpanel[3567]: segfault at 0 ip b6dc6175 sp bfad0980 error 4 in libc-2.12.so[b6d65000+191000]
Feb  7 19:52:04 iKPB kernel: [  843.844640] lxpanel[3569]: segfault at 0 ip b6d0e175 sp bfc42980 error 4 in libc-2.12.so[b6cad000+191000]
Feb  7 19:52:04 iKPB kernel: [  844.015501] lxpanel[3573]: segfault at 0 ip b6d32175 sp bfe59980 error 4 in libc-2.12.so[b6cd1000+191000]
Feb  7 19:52:04 iKPB kernel: [  844.182424] lxpanel[3575]: segfault at 0 ip b6db1175 sp bf866980 error 4 in libc-2.12.so[b6d50000+191000]
Feb  7 19:52:05 iKPB kernel: [  844.359466] lxpanel[3577]: segfault at 0 ip b6dc6175 sp bfc31980 error 4 in libc-2.12.so[b6d65000+191000]
Feb  7 19:52:05 iKPB kernel: [  844.359481] grsec: Segmentation fault occurred at    (nil) in /usr/bin/lxpanel[lxpanel:3577] uid/euid:500/500 gid/egid:500/500, parent /usr/bin/lxsession[lxsession:3338] uid/euid:500/500 gid/egid:500/500


I'm using :

kernel : 3.2.54

ld --version
GNU ld version 2.20.51.0.2-5.36.el6 20100205

lxpanel 0.5.12

lxde-common-0.5.5-1.1.noarch.rpm
lxde-icon-theme-0.5.0-1.noarch.rpm


cat /etc/redhat-release
CentOS release 6.4 (Final)





Thanks in advance,

Best regards,
Romain

you'll have to debug xinit a bit to see why it crashes. first enable coredumps in your shell where you execute startx (ulimit -c unlimited) then you'll get a coredump for each failing process and can examine them in gdb. also try an strace -f -ff -o ... on startx to see what xinit tried to do before it crashed.

I had used this command:

Code: Select all

strace -f -ff -o strace startx

the strace file :

Code: Select all

# cat strace.6277

close(255)       = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGTSTP, {SIG_DFL, [], 0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGTTIN, {SIG_DFL, [], 0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGTTOU, {SIG_DFL, [], 0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGHUP, {SIG_DFL, [], 0}, {0x80948b0, [], 0}, 8) = 0
rt_sigaction(SIGINT, {SIG_DFL, [], 0}, {0x80810f0, [], 0}, 8) = 0
rt_sigaction(SIGQUIT, {SIG_DFL, [], 0}, {0x80948b0, [], 0}, 8) = 0
rt_sigaction(SIGILL, {SIG_DFL, [], 0}, {0x80948b0, [], 0}, 8) = 0
rt_sigaction(SIGTRAP, {SIG_DFL, [], 0}, {0x80948b0, [], 0}, 8) = 0
rt_sigaction(SIGBUS, {SIG_DFL, [], 0}, {0x80948b0, [], 0}, 8) = 0
rt_sigaction(SIGKILL, {SIG_DFL, [], 0}, {0x80948b0, [], 0}, 8) = -1 EINVAL (Invalid argument)
rt_sigaction(SIGTERM, {SIG_DFL, [], 0}, {0x80948b0, [], 0}, 8) = 0
rt_sigaction(SIGCHLD, {SIG_DFL, [], 0}, {0x80833c0, [], 0}, 8) = 0
execve("/bin/rm", ["rm", "-f", "/home/igo/.serverauth.6253"], [/* 31 vars */]) = 0
brk(0)                                  = 0x80566a8
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7722000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("tls/i686/sse2/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
open("tls/i686/libc.so.6", O_RDONLY)    = -1 ENOENT (No such file or directory)
open("tls/sse2/libc.so.6", O_RDONLY)    = -1 ENOENT (No such file or directory)
open("tls/libc.so.6", O_RDONLY)         = -1 ENOENT (No such file or directory)
open("i686/sse2/libc.so.6", O_RDONLY)   = -1 ENOENT (No such file or directory)
open("i686/libc.so.6", O_RDONLY)        = -1 ENOENT (No such file or directory)
open("sse2/libc.so.6", O_RDONLY)        = -1 ENOENT (No such file or directory)
open("libc.so.6", O_RDONLY)             = -1 ENOENT (No such file or directory)
open("/home/igo/Bin/tls/i686/sse2/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/home/igo/Bin/tls/i686/sse2", 0xbf88ff10) = -1 ENOENT (No such file or directory)
open("/home/igo/Bin/tls/i686/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/home/igo/Bin/tls/i686", 0xbf88ff10) = -1 ENOENT (No such file or directory)
open("/home/igo/Bin/tls/sse2/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/home/igo/Bin/tls/sse2", 0xbf88ff10) = -1 ENOENT (No such file or directory)
open("/home/igo/Bin/tls/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/home/igo/Bin/tls", 0xbf88ff10) = -1 ENOENT (No such file or directory)
open("/home/igo/Bin/i686/sse2/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/home/igo/Bin/i686/sse2", 0xbf88ff10) = -1 ENOENT (No such file or directory)
open("/home/igo/Bin/i686/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/home/igo/Bin/i686", 0xbf88ff10) = -1 ENOENT (No such file or directory)
open("/home/igo/Bin/sse2/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/home/igo/Bin/sse2", 0xbf88ff10) = -1 ENOENT (No such file or directory)
open("/home/igo/Bin/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/home/igo/Bin", {st_mode=S_IFDIR|0755, st_size=12288, ...}) = 0
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=34938, ...}) = 0
mmap2(NULL, 34938, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7719000
close(3)                                = 0
open("/lib/libc.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\3\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\200n\1\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1907156, ...}) = 0
mmap2(NULL, 1665452, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7582000
mmap2(0xb7713000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x191) = 0xb7713000
mmap2(0xb7716000, 10668, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7716000
close(3)                                = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7581000
set_thread_area({entry_number:-1 -> 6, base_addr:0xb75816c0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0
mprotect(0xb7713000, 8192, PROT_READ)   = 0
mprotect(0xb7742000, 4096, PROT_READ)   = 0
munmap(0xb7719000, 34938)               = 0
open("/usr/lib/locale/locale-archive", O_RDONLY|O_LARGEFILE) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=99158544, ...}) = 0
mmap2(NULL, 2097152, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7381000
mmap2(NULL, 249856, PROT_READ, MAP_PRIVATE, 3, 0x37ba) = 0xb7344000
brk(0)                                  = 0x80566a8
brk(0x80776a8)                          = 0x80776a8
brk(0x8078000)                          = 0x8078000
mmap2(NULL, 4096, PROT_READ, MAP_PRIVATE, 3, 0x3814) = 0xb7343000
close(3)                                = 0
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
fstatat64(AT_FDCWD, "/home/igo/.serverauth.6253", 0x8058188, AT_SYMLINK_NOFOLLOW) = -1 ENOENT (No such file or directory)
unlinkat(AT_FDCWD, "/home/igo/.serverauth.6253", 0) = -1 ENOENT (No such file or directory)
close(0)                                = 0
close(1)                                = 0
close(2)                                = 0
exit_group(0)                           = ?

Thanks for your hel.

Also I have set :

Code: Select all

# paxctl -v /usr/bin/xinit
PaX control v0.7
Copyright 2004,2005,2006,2007,2009,2010,2011,2012 PaX Team <pageexec@freemail.hu>

- PaX flags: -p-s-m-x-e-r [/usr/bin/xinit]
        PAGEEXEC is disabled
        SEGMEXEC is disabled
        MPROTECT is disabled
        RANDEXEC is disabled
        EMUTRAMP is disabled
        RANDMMAP is disabled

Code: Select all

# paxctl -v /usr/bin/lxpanel
PaX control v0.7
Copyright 2004,2005,2006,2007,2009,2010,2011,2012 PaX Team <pageexec@freemail.hu>

- PaX flags: -p-s-m-x-e-r [/usr/bin/lxpanel]
        PAGEEXEC is disabled
        SEGMEXEC is disabled
        MPROTECT is disabled
        RANDEXEC is disabled
        EMUTRAMP is disabled
        RANDMMAP is disabled

Also I have tried to do this :

Code: Select all

echo "0" > /proc/sys/kernel/grsecurity/chroot_restrict_nice

Thanks in advance for you help,

Best regards,
Romain

which strace file? -ff creates a bunch of them, i'll need the one for xinit (you can recognize it as there's an execve(xinit) inside or just send all of them to me).

Finally,

I have solved the problem with change the option of lxpanel.

I have disabled the option --profile LXDE in the file /etc/xdg/lxsession/autostart