grsecurity forums

Hello,

i upgraded my kernal to gresec, but after activating pax , i got this error message.
https://i.imgsafe.org/ed847e6.jpg
Fist line:
[42.499836] gresec:denied RWX mmap of /user/lib/mesa/libGL.so1.2.0 by /user/lib/xorg-server/Xorg[Xorg:593] uid:0/0 gid:0/0, parent /user/bin/lightdm[lightdm:593] uid/euid:0/0 gid:0/0


Its only when pax is set to on, if i turn it off, the the kernel boots up without any problems!

I found similar posts in this forum which recommend that i should add “nomodeset” to the booting kernel !
https://bbs.archlinux.org/viewtopic.php?id=205410
As in this post deeper explained "this is could be a bug in qxl"
https://bbs.archlinux.org/viewtopic.php?id=206299

i changed the bootline in grup --> linux /vmlinuz-linux-grsec root=UUID=xxxxxx rw nomodeset quiet nomodeset cryptdevice=/dev/disk/by-uuid/xxxxx:cryptAntergos quiet resume=UUID=xxxxx

but the error message is the same, nothing has changed

Has anybody a clue what i can/should do ?

best regards deadpoollucky

You should probably just set the right flags on the xorg binary, allowing it to do RWX maps. Mesa apparently needs a RWX map (your driver, perhaps), so you need to set the right pax flag with paxctl.
This is a common problem with more programs than just Xorg, so I recommend that you read a bit more about the concept.