[solved] Trying to disable mprotect() restrictions on Xorg

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

[solved] Trying to disable mprotect() restrictions on Xorg

Postby GBit » Tue Aug 27, 2013 12:16 am

mprotect restrictions break Xorg, so I'm trying to disable it for the binary, but I get:
/usr/bin/Xorg: Text file busy


I've tried killing Xorg but I keep getting that error. Is there a way to do this that I'm not thinking of?

edit: Had to run "service systemd stop" and then ctrl + alt + F4, then I could do it.
Last edited by GBit on Wed Aug 28, 2013 1:29 am, edited 1 time in total.
GBit
 
Posts: 81
Joined: Mon Jun 04, 2012 3:31 pm

Re: Trying to disable mprotect() restrictions on Xorg

Postby N8Fear » Tue Aug 27, 2013 7:06 am

First of all: I don't have any issues with mprotect and Xorg (see checksec.sh output):
Code: Select all
* Does the CPU support NX: Yes

         COMMAND    PID RELRO             STACK CANARY           NX/PaX        PIE
            Xorg   9079 Partial RELRO     Canary found           PaX enabled   PIE enabled   


Do you have any logs stating what is happening and what is killed?
Because of the "text file busy" issue you could check if Xorg still running (i.e. with ps). If it's running kill it again and check if it is respawned by some other process.
N8Fear
 
Posts: 37
Joined: Thu Jan 17, 2013 5:01 am


Return to grsecurity support

cron