Re: nvidia.ko with Grsecurity & PaX kernel
Alex Efros <[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Organization | http://powerman.name/ |
| Message-ID | <[email protected]> |
Hi!
On Wed, Sep 11, 2013 at 11:44:07PM +0300, Balint Szente wrote:
> So I disabled CONFIG_PAX_MPROTECT for the moment.
It's much better to `paxctl-ng -m /usr/bin/Xorg` instead. And probably few
other applications (mplayer, glxgears, etc.).
Also, you can install latest stable nvidia-drivers by simple removing this
line from ebuild (bug already reported):
epatch "${FILESDIR}"/nvidia-drivers-pax-const.patch
Main issue with nvidia-drivers on hardened is what sometimes some race
condition happens and system just freezes. This may happens when starting
mplayer with hardware acceleration:
mplayer -vf-clr -vo vdpau -vc ffh264vdpau,ffmpeg12vdpau, …
or just in the middle of viewing video using flash in browser.
Not sure about flash, but when this happens with mplayer I've tried to
analyse what's going on: system is working, but incredible slow, it took
about 10 minutes to switch to another virtual desktop, run top, found
mplayer process using 100% CPU, try to kill it (don't remember is it was
successful or not), but it won't fix anything - system still was too slow.
In all cases I've to press RESET because trying to do normal shutdown
procedure may took hours.
--
WBR, Alex.