grsecurity forums

Howdy,

I built grsecurity (High) into a 2.4.22-gentoo-r7 kernel. Everything seems to work except for KDM/X... here's an excerpt from the logs:

Mar 7 13:38:25 localhost PAX: terminating task: /usr/X11R6/bin/XFree86(X):14145, uid/euid: 0/0, PC: 0826c058, SP: 581bd4cc
Mar 7 13:38:25 localhost PAX: bytes at PC: 55 89 e5 83 ec 08 8b 55 08 c7 04 24 a8 c3 26 08 89 15 b0 c3
Mar 7 13:38:25 localhost grsec: attempted resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 by (X:14145) UID(0) EUID(0), parent (kdm:31951) UID(0) EUID(0)
Mar 7 13:38:25 localhost kdm[31951]: X server for display :0 terminated unexpectedly
Mar 7 13:38:25 localhost kdm[31951]: Unable to fire up local display :0; disabling.

I'm running KDE 3.2. Everything works great (network, emerge, various shell apps) except for KDM. Any ideas? I'm new to grsecurity, would like to start using it on all my machines.

Thanks,
Bart

Code: Select all

emerge chpax
/etc/init.d/chpax start
rc-update add chpax default


That should make Xfree and a few other programs get exempted from Pax's protection so they can run!

I emerged gradm lastnight and one of the packages downloaded was chpax... I'll give this a go tonight when I get home. Thanks again.

Bart