Counterstrike Server's crashing

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Counterstrike Server's crashing

Postby systray` » Sun Mar 18, 2007 2:55 pm

Hi,

I got this error:

Code: Select all
Rode@server1:~/CSS$ ./srcds_run -game cstrike +map de_dust2 +maxplayers 10 -port 27015 -tickrate 100 +ip 80.**.87.** -pingboost 2 -autoupdate
Auto detecting CPU
Using AMD-Opteron (64 bit) Optimised binary.
Auto-restarting the server on crash
Updating server using Steam.
Checking bootstrapper version ...
Updating Installation
This Linux installation is unsupported. You must have GLIBC 2.3.2 or higher.
Please update your installation to a more recent version.
 For more information visit http://support.steampowered.com
Err: ./test1.so: cannot make segment writable for relocation: Permission denied
So Mär 18 19:48:27 CET 2007: Steam Update failed, ignoring.
Failed to open bin/dedicated_amd.so (bin/vstdlib_i486.so: cannot make segment writable for relocation: Permission denied)
Add "-debug" to the ./srcds_run command line to generate a debug.log to help with solving this problem
So Mär 18 19:48:27 CET 2007: Server restart in 10 seconds
So Mär 18 19:48:37 CET 2007: Server Quit


Which Commands should I use? I used chpax -m but it won't!

Cheers.
systray`
 
Posts: 17
Joined: Wed Oct 12, 2005 2:33 pm

Postby systray` » Sun Mar 18, 2007 3:20 pm

Hello again,

My teamspeak server crashes to (yeah I know I should use chpax -sp but it won't)
Code: Select all
Rode@server1:~/TS2/tss2_rc2$ ./*start* start
starting the teamspeak2 server
Runtime error   0 at FFBF80B8
./teamspeak2-server_startscript: line 94: 15952 Speicherzugriffsfehler  ./server_linux -PID=tsserver2.pid


Logs:
Code: Select all
Mar 18 20:12:59 server1 kernel: PAX: From 82.83.221.22: execution attempt in: /home/Rode/TS2/tss2_rc2/server_linux, 08218000-08230000 000cf000
Mar 18 20:12:59 server1 kernel: PAX: terminating task: /home/Rode/TS2/tss2_rc2/server_linux(server_linux):13428, uid/euid: 1008/1008, PC: 000000000821bc57, SP: 00000000f9ece4a0
Mar 18 20:12:59 server1 kernel: PAX: bytes at PC: 83 44 24 04 dc e9 33 3d e3 ff 83 44 24 04 dc e9 3d 3d e3 ff
Mar 18 20:12:59 server1 kernel: PAX: bytes at SP-8: 0810695c0805afab 0824dbec0804f884 0824dbec08230514 f9ece4d008073996 0000000d0804c72b f9ece6b40804c7f4 0810695400000002 0804c870f9ece4d8 08053560f9ece628 08106cbcf9ece6b4 f9ece6c000000000


How can I resolve this?

Cheers.
systray`
 
Posts: 17
Joined: Wed Oct 12, 2005 2:33 pm

Postby forsaken » Mon Mar 19, 2007 4:00 am

Make sure you chpax -m the correct binary, in your case the amd. It works fine for me.
forsaken
 
Posts: 74
Joined: Tue May 18, 2004 3:04 am

Postby harrygittens » Mon Mar 19, 2007 4:28 am

i think you should chpax amd_dedicated.so
harrygittens
 
Posts: 21
Joined: Fri Feb 16, 2007 2:20 pm

Postby PaX Team » Mon Mar 19, 2007 5:14 am

systray` wrote:How can I resolve this?
if you had bothered to search the forum, you'd have found http://forums.grsecurity.net/viewtopic.php?t=698 where it was explained.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Postby PaX Team » Mon Mar 19, 2007 5:15 am

harrygittens wrote:i think you should chpax amd_dedicated.so
no he shouldn't, PaX flags on libraries are useless, it's the main executable that matters (think about how easily the protection could be switched off by merely mmap'ing a chpax'd library...).
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Postby harrygittens » Mon Mar 19, 2007 9:19 am

ok. i am not expert. sorry
harrygittens
 
Posts: 21
Joined: Fri Feb 16, 2007 2:20 pm

Postby systray` » Mon Mar 19, 2007 3:06 pm

Code: Select all
server1:/home/Mode/TS2/tss2_rc2# chpax -sp server_linux
server1:/home/Mode/TS2/tss2_rc2# ./server_linux
Runtime error 234 at 0804CDF3
server1:/home/Mode/TS2/tss2_rc2#


It don't take a effect...

Cheers
systray`
 
Posts: 17
Joined: Wed Oct 12, 2005 2:33 pm

Postby PaX Team » Mon Mar 19, 2007 5:56 pm

systray` wrote:
Code: Select all
server1:/home/Mode/TS2/tss2_rc2# chpax -sp server_linux
server1:/home/Mode/TS2/tss2_rc2# ./server_linux
Runtime error 234 at 0804CDF3
server1:/home/Mode/TS2/tss2_rc2#


It don't take a effect...

Cheers
what PaX flag control method did you enable in .config? and what PaX logs do you get after chpax?
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Postby forsaken » Tue Mar 20, 2007 3:53 am

systray, you need to chpax the binary (srcds_amd), it doesn't work on a script.
forsaken
 
Posts: 74
Joined: Tue May 18, 2004 3:04 am

Postby systray` » Wed Mar 21, 2007 6:49 pm

PaX Team wrote:
systray` wrote:
Code: Select all
server1:/home/Mode/TS2/tss2_rc2# chpax -sp server_linux
server1:/home/Mode/TS2/tss2_rc2# ./server_linux
Runtime error 234 at 0804CDF3
server1:/home/Mode/TS2/tss2_rc2#


It don't take a effect...

Cheers
what PaX flag control method did you enable in .config? and what PaX logs do you get after chpax?

I got a RLIMIT Error.
My Kernelconfig:

Code: Select all
CONFIG_PAX=y
# CONFIG_PAX_SOFTMODE is not set
CONFIG_PAX_EI_PAX=y
CONFIG_PAX_PT_PAX_FLAGS=y
CONFIG_PAX_NO_ACL_FLAGS=y
# CONFIG_PAX_HAVE_ACL_FLAGS is not set
# CONFIG_PAX_HOOK_ACL_FLAGS is not set
CONFIG_PAX_NOEXEC=y
CONFIG_PAX_PAGEEXEC=y
CONFIG_PAX_MPROTECT=y
CONFIG_PAX_NOELFRELOCS=y
CONFIG_PAX_ASLR=y
CONFIG_PAX_RANDUSTACK=y
CONFIG_PAX_RANDMMAP=y
CONFIG_PAX_MEMORY_SANITIZE=y
CONFIG_GRKERNSEC=y
# CONFIG_GRKERNSEC_LOW is not set
# CONFIG_GRKERNSEC_MEDIUM is not set
CONFIG_GRKERNSEC_HIGH=y
# CONFIG_GRKERNSEC_CUSTOM is not set
CONFIG_GRKERNSEC_KMEM=y
# CONFIG_GRKERNSEC_IO is not set
CONFIG_GRKERNSEC_PROC_MEMMAP=y
CONFIG_GRKERNSEC_BRUTE=y
CONFIG_GRKERNSEC_HIDESYM=y
CONFIG_GRKERNSEC_ACL_HIDEKERN=y
CONFIG_GRKERNSEC_ACL_MAXTRIES=3
CONFIG_GRKERNSEC_ACL_TIMEOUT=30
CONFIG_GRKERNSEC_PROC=y
CONFIG_GRKERNSEC_PROC_USER=y
CONFIG_GRKERNSEC_PROC_USERGROUP=y
CONFIG_GRKERNSEC_PROC_GID=1001
CONFIG_GRKERNSEC_PROC_ADD=y
CONFIG_GRKERNSEC_LINK=y
CONFIG_GRKERNSEC_FIFO=y
CONFIG_GRKERNSEC_CHROOT=y
CONFIG_GRKERNSEC_CHROOT_MOUNT=y
CONFIG_GRKERNSEC_CHROOT_DOUBLE=y
CONFIG_GRKERNSEC_CHROOT_PIVOT=y
CONFIG_GRKERNSEC_CHROOT_CHDIR=y
CONFIG_GRKERNSEC_CHROOT_CHMOD=y
CONFIG_GRKERNSEC_CHROOT_FCHDIR=y
CONFIG_GRKERNSEC_CHROOT_MKNOD=y
CONFIG_GRKERNSEC_CHROOT_SHMAT=y
CONFIG_GRKERNSEC_CHROOT_UNIX=y
CONFIG_GRKERNSEC_CHROOT_FINDTASK=y
CONFIG_GRKERNSEC_CHROOT_NICE=y
CONFIG_GRKERNSEC_CHROOT_SYSCTL=y
CONFIG_GRKERNSEC_CHROOT_CAPS=y
# CONFIG_GRKERNSEC_AUDIT_GROUP is not set
# CONFIG_GRKERNSEC_EXECLOG is not set
CONFIG_GRKERNSEC_RESLOG=y
# CONFIG_GRKERNSEC_CHROOT_EXECLOG is not set
# CONFIG_GRKERNSEC_AUDIT_CHDIR is not set
CONFIG_GRKERNSEC_AUDIT_MOUNT=y
# CONFIG_GRKERNSEC_AUDIT_IPC is not set
CONFIG_GRKERNSEC_SIGNAL=y
CONFIG_GRKERNSEC_FORKFAIL=y
CONFIG_GRKERNSEC_TIME=y
CONFIG_GRKERNSEC_PROC_IPADDR=y
# CONFIG_GRKERNSEC_AUDIT_TEXTREL is not set
CONFIG_GRKERNSEC_EXECVE=y
CONFIG_GRKERNSEC_SHM=y
CONFIG_GRKERNSEC_DMESG=y
# CONFIG_GRKERNSEC_TPE is not set


Cheers.
systray`
 
Posts: 17
Joined: Wed Oct 12, 2005 2:33 pm

Postby PaX Team » Tue Mar 27, 2007 6:09 pm

systray` wrote:I got a RLIMIT Error.
i guess you mean the coredump related log. since you don't seem to be getting any PaX kill logs, it's more likely an application bug, you'd have to debug it to see where and why it crashes. as a blind shot, try to disable randomization on it as well, maybe it's picky about it for some reason.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm


Return to grsecurity support

cron