Re: nvidia.ko with Grsecurity & PaX kernel
Balint Szente <[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <20130911234407.623b277b@inspiro> |
On Wed, 11 Sep 2013 19:55:13 +0200 Amadeusz Sławiński <[email protected]> wrote: > [...] > > CONFIG_PAX_KERNEXEC_PLUGIN_METHOD_OR=y > > CONFIG_PAX_KERNEXEC_PLUGIN_METHOD="or" > CONFIG_PAX_KERNEXEC_PLUGIN_METHOD_OR: > This method is incompatible with binary only modules but > has a lower runtime overhead. > > Try using bts Yes, of course! Stupid me. This was it... thank you very much. Now there is another issue: kernel: grsec: denied RWX mmap of /usr/lib64/opengl/nvidia/lib/libGL.so.325.15 on pretty much everything, but it is a known issue: <https://bugs.gentoo.org/show_bug.cgi?id=433121> So I disabled CONFIG_PAX_MPROTECT for the moment.