grsec denies X session
Posted: Wed Aug 20, 2014 8:49 am
The recent version of Xorg 1.16 allow X to be executed from normal user however grsec dines that with the below errors, I can only run "startx" by root.
Also can't start login manager using systemd even by root.
Also can't start login manager using systemd even by root.
- Code: Select all
Aug 19 20:11:44 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:581] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/startx[startx:564] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 20:11:50 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:655] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/pulseaudio[pulseaudio:654] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 20:11:52 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 20 for /usr/lib/rtkit/rtkit-daemon[rtkit-daemon:656] uid/euid:133/133 gid/egid:133/133, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 19 20:12:03 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/VBoxClient[VBoxClient:787] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/VBoxClient-all[VBoxClient-all:766] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 20:12:24 Computer kernel: grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/lib/tracker/tracker-extract[tracker-extract:773] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/gnome-session[gnome-session:587] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 20:13:13 Computer kernel: grsec: denied exec of usermode helper binary located outside of /sbin and system library paths
Aug 19 20:14:14 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:571] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/startx[startx:554] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 20:14:21 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:623] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/pulseaudio[pulseaudio:622] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 20:14:22 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 20 for /usr/lib/rtkit/rtkit-daemon[rtkit-daemon:624] uid/euid:133/133 gid/egid:133/133, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 19 20:14:35 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/VBoxClient[VBoxClient:781] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/VBoxClient-all[VBoxClient-all:759] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 20:14:55 Computer kernel: grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/lib/tracker/tracker-extract[tracker-extract:767] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/gnome-session[gnome-session:578] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 20:57:48 Computer kernel: grsec: denied exec of usermode helper binary located outside of /sbin and system library paths
Aug 19 22:37:41 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:540] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/startx[startx:523] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 22:39:36 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:570] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/xinit[xinit:569] uid/euid:0/0 gid/egid:0/0
Aug 19 22:41:48 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:542] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/startx[startx:523] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 22:42:11 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:565] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/startx[startx:546] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 22:42:22 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:590] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/xinit[xinit:589] uid/euid:0/0 gid/egid:0/0
Aug 19 22:48:14 Computer kernel: grsec: denied exec of usermode helper binary located outside of /sbin and system library paths
Aug 19 22:52:26 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:547] uid/euid:1000/1000 gid/egid:1001/1001, parent /usr/bin/startx[startx:530] uid/euid:1000/1000 gid/egid:1001/1001
Aug 19 22:56:13 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:607] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/xinit[xinit:606] uid/euid:0/0 gid/egid:0/0
Aug 19 22:57:41 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:542] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:525] uid/euid:1000/1000 gid/egid:1000/1000
Aug 19 22:58:46 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:662] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:645] uid/euid:1000/1000 gid/egid:1000/1000
Aug 19 23:01:54 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:763] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:746] uid/euid:1000/1000 gid/egid:1000/1000
Aug 19 23:24:37 Computer kernel: grsec: denied exec of usermode helper binary located outside of /sbin and system library paths
Aug 19 23:24:37 Computer kernel: grsec: denied exec of usermode helper binary located outside of /sbin and system library paths
Aug 19 23:56:24 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:592] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:575] uid/euid:1000/1000 gid/egid:1000/1000
Aug 19 23:58:50 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:701] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:684] uid/euid:1000/1000 gid/egid:1000/1000
Aug 19 23:59:25 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:747] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:730] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 00:00:33 Computer kernel: grsec: denied exec of usermode helper binary located outside of /sbin and system library paths
Aug 20 00:00:33 Computer kernel: grsec: denied exec of usermode helper binary located outside of /sbin and system library paths
Aug 20 01:10:09 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:584] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:567] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 01:10:22 Computer kernel: grsec: denied resource overstep by requesting 21 for RLIMIT_NICE against limit 20 for /usr/bin/xinit[xinit:605] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/startx[startx:588] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 01:14:36 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:640] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/xinit[xinit:639] uid/euid:0/0 gid/egid:0/0
Aug 20 01:16:23 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:1092] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/xinit[xinit:1091] uid/euid:0/0 gid/egid:0/0
Aug 20 04:51:49 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:508] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/gdm[gdm:495] uid/euid:0/0 gid/egid:0/0
Aug 20 04:51:55 Computer kernel: grsec: denied kernel module auto-load of fuse by uid 120
Aug 20 04:51:57 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:659] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:658] uid/euid:120/120 gid/egid:120/120
Aug 20 04:51:58 Computer kernel: grsec: denied priority change of process (rtkit-daemon:661) by /usr/lib/rtkit/rtkit-daemon[rtkit-daemon:661] uid/euid:133/133 gid/egid:133/133, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0
Aug 20 04:51:59 Computer kernel: grsec: denied resource overstep by requesting 30 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:659] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:658] uid/euid:120/120 gid/egid:120/120
Aug 20 04:53:36 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:712] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/gdm[gdm:495] uid/euid:0/0 gid/egid:0/0
Aug 20 04:53:37 Computer kernel: grsec: denied kernel module auto-load of fuse by uid 120
Aug 20 04:53:37 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:766] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:765] uid/euid:120/120 gid/egid:120/120
Aug 20 04:53:56 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:799] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/gdm[gdm:794] uid/euid:0/0 gid/egid:0/0
Aug 20 04:53:57 Computer kernel: grsec: denied kernel module auto-load of fuse by uid 120
Aug 20 04:53:58 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:853] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:852] uid/euid:120/120 gid/egid:120/120
Aug 20 04:53:58 Computer kernel: grsec: denied resource overstep by requesting 30 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:853] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:852] uid/euid:120/120 gid/egid:120/120
Aug 20 04:53:58 Computer kernel: grsec: denied resource overstep by requesting 29 for RLIMIT_NICE against limit 0 for /usr/bin/pulseaudio[pulseaudio:853] uid/euid:120/120 gid/egid:120/120, parent /usr/bin/pulseaudio[pulseaudio:852] uid/euid:120/120 gid/egid:120/120
Aug 20 04:54:31 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:894] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/lightdm[lightdm:890] uid/euid:0/0 gid/egid:0/0
Aug 20 04:54:31 Computer kernel: grsec: denied resource overstep by requesting 177311744 for RLIMIT_MEMLOCK against limit 65536 for /usr/bin/lightdm-gtk-greeter[lightdm-gtk-gre:908] uid/euid:620/620 gid/egid:620/620, parent /usr/bin/lightdm[lightdm:903] uid/euid:0/0 gid/egid:0/0
Aug 20 04:54:46 Computer kernel: grsec: denied resource overstep by requesting 31 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:973] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/pulseaudio[pulseaudio:972] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 04:54:47 Computer kernel: grsec: denied resource overstep by requesting 30 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:973] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/pulseaudio[pulseaudio:972] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 04:54:47 Computer kernel: grsec: denied resource overstep by requesting 29 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:973] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/pulseaudio[pulseaudio:972] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 04:54:47 Computer kernel: grsec: denied resource overstep by requesting 28 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:973] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/pulseaudio[pulseaudio:972] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 04:54:48 Computer kernel: grsec: denied resource overstep by requesting 27 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:973] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/pulseaudio[pulseaudio:972] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 04:54:49 Computer kernel: grsec: denied resource overstep by requesting 26 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:973] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/pulseaudio[pulseaudio:972] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 04:54:49 Computer kernel: grsec: denied resource overstep by requesting 25 for RLIMIT_NICE against limit 20 for /usr/bin/pulseaudio[pulseaudio:973] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/pulseaudio[pulseaudio:972] uid/euid:1000/1000 gid/egid:1000/1000
Aug 20 04:54:50 Computer kernel: grsec: denied kernel module auto-load of fuse by uid 1000
Aug 20 04:56:02 Computer kernel: grsec: denied use of ioperm() by /usr/bin/Xorg.bin[Xorg.bin:1156] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/lightdm[lightdm:890] uid/euid:0/0 gid/egid:0/0
Aug 20 04:56:03 Computer kernel: grsec: denied resource overstep by requesting 177311744 for RLIMIT_MEMLOCK against limit 65536 for /usr/bin/lightdm-gtk-greeter[lightdm-gtk-gre:1164] uid/euid:620/620 gid/egid:620/620, parent /usr/bin/lightdm[lightdm:1162] uid/euid:0/0 gid/egid:0/0