Re: "grsec: denied RWX mprotect" doesn't kill app anymore

Alexander Tsoy <alexander-EP/[email protected]> Sun, 2 Nov 2014 01:04:30 +0300

Newsgroups	gmane.linux.gentoo.hardened
Message-ID	<[email protected]>

В Sat, 1 Nov 2014 11:21:51 +0100
Amadeusz Sławiński <[email protected]> пишет:

> On Sat, 1 Nov 2014 12:08:23 +0200
> Alex Efros <[email protected]> wrote:
> 
> > Hi!
> > 
> > I wonder is something was changed in handling "grsec: denied RWX
> > mprotect"? Previously when I see this in kernel log it usually
> > result in killing app (and I've to run `paxctl-ng -m /that/app`),
> > but now it looks like this doesn't happens anymore. For example:
> > 
> 
> https://bugs.freedesktop.org/show_bug.cgi?id=73473
> 
> OpenGL apps fallback to software rendering if they can't mmap
> executable memory.

Alex uses nvidia blob, so fdo bug is unrelated here:

> > # eselect opengl list
> > Available OpenGL implementations:
> >   [1]   nvidia *
> >   [2]   xorg-x11

-- 
Alexander Tsoy