grsec: denied RWX mprotect libcrypto

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

grsec: denied RWX mprotect libcrypto

Postby specs » Thu Mar 22, 2012 1:41 pm

After an upgrade of the usual packages I found the following in my logs (Debian Unstable):
Code: Select all
grsec: denied RWX mprotect of /usr/lib/i386-linux-gnu/i686/cmov/libcrypto.so.1.0.0 by /usr/bin/pycompile[pycompile:30503] uid/euid:0/0 gid/egid:0/0, parent /var/lib/dpkg/info/gimp.postinst[gimp.postinst:30501] uid/euid:0/0 gid/egid:0/0

I thought this was an isolated problem, therefore I tried a few things to fix the immediate problems when I found I could not ssh to another pc. From a (luckily) open session I found this pc suffered from the same problem (Debian Testing). Unluckily I found almost all services were suffering similar problems with libcrypto.

Are other people also suffering from the openssl-1.0.0h upgrade?
One pc was running grsecurity-2.9-3.2.12-201203201932, the other grsecurity-2.9-2.6.32.58-201203162123.
specs
 
Posts: 190
Joined: Sun Mar 26, 2006 7:00 am

Re: grsec: denied RWX mprotect libcrypto

Postby Lox » Thu Mar 22, 2012 3:41 pm

Lox
 
Posts: 8
Joined: Sat Jul 02, 2011 7:53 pm

Re: grsec: denied RWX mprotect libcrypto

Postby specs » Thu Mar 22, 2012 4:54 pm

While it is most irritating on the testing installation, the unstable installation already uses the latest version (1.0.1-2), which still exhibits the problem.
specs
 
Posts: 190
Joined: Sun Mar 26, 2006 7:00 am


Return to grsecurity support