grsecurity forums

Hi everyone,

I have a long time problem in my logs (I have always had this problem, even with PHP5).

This message keeps showing in my kernel logs and in local terminal :

grsec: denied RWX mmap of <anonymous mapping> by /usr/sbin/php-fpm7.0[php-fpm7.0:30489] uid/euid:1015/1015 gid/egid:33/33, parent /usr/sbin/php-fpm7.0[php-fpm7.0:30476] uid/euid:0/0 gid/egid:0/0

Everything is working perfectly, PHP-FPM never crashes or never block any app.
I haven't applied any specific paxctl flags on the executable.

Any idea how to get rid of this?

My system :

- Debian 8 x64
- Kernel 4.6.4 (https://abyssproject.net/debian-grsecurity-kernels/)
- PHP 7.0.8-1~dotdeb+8.1

Thanks in advance.

BR,
Nicolas

I most often can't figure out how to fix such messages (I have some, just with python3.4 today instead of php...), but I wanted to say how glad I am to see:.

Nicolas wrote:...

My system :

- Debian 8 x64
- Kernel 4.6.4 (https://abyssproject.net/debian-grsecurity-kernels/)
- PHP 7.0.8-1~dotdeb+8.1

that grsecurity is made even easier to deploy on Debian (and derivatives), as it should be!

Regarding the messages, they look bad, but I think they are not necessarily a problem. What it you had Firefox (and other programs) constantly "denied connect() ... to port 0/udp" and stuff, like here ...

Regards!