grsecurity forums

I installed wkhtmltopdf debian package for Wheezy. But when tried to see if the app is working, it was killed by PaX. Is this normal?

Output in syslog is:

Mar 3 19:10:18 wrk kernel: [ 8670.066862] PAX: execution attempt in: <anonymous mapping>, 24da0000000-24de004e000 24da0000000
Mar 3 19:10:18 wrk kernel: [ 8670.066868] PAX: terminating task: /usr/local/bin/wkhtmltopdf(wkhtmltopdf):6651, uid/euid: 1000/1000, PC: 0000024da0000318, SP: 0000039ea22ad3c8
Mar 3 19:10:18 wrk kernel: [ 8670.066873] PAX: bytes at PC: 59 49 89 4d f0 49 bb 0a 00 00 00 00 00 00 00 4d 89 5d 00 49
Mar 3 19:10:18 wrk kernel: [ 8670.066885] PAX: bytes at SP-8: 0000000000000000 0000000000e76d0d 0000024d00000097 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
Mar 3 19:10:18 wrk kernel: [ 8670.066964] grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/local/bin/wkhtmltopdf[wkhtmltopdf:6651] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:6625] uid/euid:1000/1000 gid/egid:1000/1000

it looks like wkhtmltopdf generates code at runtime so it's not compatible with MPROTECT, you'll have to disable it on the binary.