Re: pidgin & nvidia-drivers-355.11
Alex Efros <[email protected]> Sat, 19 Sep 2015 22:38:24 +0300
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Organization | http://powerman.name/ |
| Message-ID | <[email protected]> |
Hi! On Sat, Sep 19, 2015 at 09:33:15PM +0200, PaX Team wrote: > did you see only a single log per executable or two? i'm asking it > because this method of runtime codegen would produce two messages > (and the grsec log message is actually wrong as it's not a denial > but rather the opposite, spender will fix it in the next patch ;). Two. I've omit second because it's same as first. Here is full log for xxkb: 2015-09-19_19:37:29.08354 kern.alert: grsec: denied text relocation in /usr/lib64/opengl/nvidia/lib/libGLdispatch.so.0, VMA:0x77ad9d9cf000 0x00000000 by /usr/bin/xxkb[xxkb:2997] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:12208] uid/euid:1000/1000 gid/egid:1000/1000 2015-09-19_19:37:29.08357 kern.alert: grsec: denied text relocation in /usr/lib64/opengl/nvidia/lib/libGLdispatch.so.0, VMA:0x77ad9d9cf000 0x00000000 by /usr/bin/xxkb[xxkb:2997] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:12208] uid/euid:1000/1000 gid/egid:1000/1000 2015-09-19_19:37:29.08853 kern.alert: grsec: denied RWX mprotect of /usr/lib64/opengl/nvidia/lib/libGL.so.355.11 by /usr/bin/xxkb[xxkb:2997] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:12208] uid/euid:1000/1000 gid/egid:1000/1000 -- WBR, Alex.