Cups fails to start

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Cups fails to start

Postby tim » Tue Jun 10, 2014 3:58 am

With Archlinux (linux-grsec 3.14.5) and cups (1.7.3) I get the following error:

Code: Select all
grsec: denied RWX mprotect of /usr/bin/cupsd by /usr/bin/cupsd[cupsd:775] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0


Code: Select all
# gettfattr -n user.pax.flags /usr/bin/cupsd
/usr/bin/cupsd: user.pax.flags: Kein solches Attribut


Sorry, I'm a newbie. Perhaps someone could help me. Thanks.
tim
 
Posts: 1
Joined: Tue Jun 10, 2014 3:40 am

Re: Cups fails to start

Postby strcat » Tue Jun 10, 2014 12:37 pm

tim wrote:With Archlinux (linux-grsec 3.14.5) and cups (1.7.3) I get the following error:

Code: Select all
grsec: denied RWX mprotect of /usr/bin/cupsd by /usr/bin/cupsd[cupsd:775] uid/euid:0/0 gid/egid:0/0, parent /usr/lib/systemd/systemd[systemd:1] uid/euid:0/0 gid/egid:0/0


Code: Select all
# gettfattr -n user.pax.flags /usr/bin/cupsd
/usr/bin/cupsd: user.pax.flags: Kein solches Attribut


Sorry, I'm a newbie. Perhaps someone could help me. Thanks.


Did you read the wiki documentation on this? It's not yet very extensive, but the answers you're looking for are there. You need to add an `em /usr/bin/cupsd` line to `/etc/paxd.conf`. The package ships with PaX in soft mode by default, so you either altered the configuration file or installed the paxd package which flips off soft mode on boot.
strcat
 
Posts: 20
Joined: Tue Jun 10, 2014 12:22 pm

Re: Cups fails to start

Postby strcat » Wed Jun 11, 2014 1:23 am

By the way, this occurs because of a binutils issue (in a commit Arch has backported) and will be unnecessary as soon as it's fixed. It causes a messed up relocation.
strcat
 
Posts: 20
Joined: Tue Jun 10, 2014 12:22 pm


Return to grsecurity support