Grsec and java

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Grsec and java

Postby melco » Mon Sep 05, 2011 4:13 am

Hi
I think grsec prevents Wuala (java-based p2p online storage) from starting.
Strace output on pastebin.
Code: Select all
# sysctl -a | grep grsec
kernel.grsecurity.linking_restrictions = 1
kernel.grsecurity.deter_bruteforce = 0
kernel.grsecurity.fifo_restrictions = 1
kernel.grsecurity.signal_logging = 1
kernel.grsecurity.forkfail_logging = 1
kernel.grsecurity.timechange_logging = 1
kernel.grsecurity.chroot_deny_shmat = 1
kernel.grsecurity.chroot_deny_unix = 1
kernel.grsecurity.chroot_deny_mount = 1
kernel.grsecurity.chroot_deny_fchdir = 1
kernel.grsecurity.chroot_deny_chroot = 1
kernel.grsecurity.chroot_deny_pivot = 1
kernel.grsecurity.chroot_enforce_chdir = 1
kernel.grsecurity.chroot_deny_chmod = 1
kernel.grsecurity.chroot_deny_mknod = 1
kernel.grsecurity.chroot_restrict_nice = 1
kernel.grsecurity.chroot_caps = 1
kernel.grsecurity.chroot_deny_sysctl = 1
kernel.grsecurity.audit_mount = 1
kernel.grsecurity.dmesg = 1
kernel.grsecurity.chroot_findtask = 1
kernel.grsecurity.resource_logging = 0
kernel.grsecurity.harden_ptrace = 1
kernel.grsecurity.grsec_lock = 0
kernel.osrelease = 2.6.32.45-grsec


Please help to fix this.
melco
 
Posts: 10
Joined: Thu Aug 18, 2011 8:44 am

Re: Grsec and java

Postby PaX Team » Mon Sep 05, 2011 4:48 am

melco wrote:I think grsec prevents Wuala (java-based p2p online storage) from starting.
besides searching the forum next time, you want to disable MPROTECT on /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/bin/java probably.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: Grsec and java

Postby melco » Mon Sep 05, 2011 7:12 am

Thanks.
Image
melco
 
Posts: 10
Joined: Thu Aug 18, 2011 8:44 am


Return to grsecurity support