grsecurity forums

With Archlinux (linux-grsec 3.14.5) and cups (1.7.3) I get the following error:

Code: Select all

grsec: denied RWX mprotect of /usr/bin/cupsd by /usr/bin/cupsd[cupsd:775] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0

Code: Select all

# gettfattr -n user.pax.flags /usr/bin/cupsd
/usr/bin/cupsd: user.pax.flags: Kein solches Attribut

Sorry, I'm a newbie. Perhaps someone could help me. Thanks.

tim wrote:With Archlinux (linux-grsec 3.14.5) and cups (1.7.3) I get the following error:

Code: Select all

grsec: denied RWX mprotect of /usr/bin/cupsd by /usr/bin/cupsd[cupsd:775] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0

Code: Select all

# gettfattr -n user.pax.flags /usr/bin/cupsd
/usr/bin/cupsd: user.pax.flags: Kein solches Attribut

Sorry, I'm a newbie. Perhaps someone could help me. Thanks.

Did you read the wiki documentation on this? It's not yet very extensive, but the answers you're looking for are there. You need to add an `em /usr/bin/cupsd` line to `/etc/paxd.conf`. The package ships with PaX in soft mode by default, so you either altered the configuration file or installed the paxd package which flips off soft mode on boot.

By the way, this occurs because of a binutils issue (in a commit Arch has backported) and will be unnecessary as soon as it's fixed. It causes a messed up relocation.