Gentoo Archives: gentoo-hardened

From: atoth@××××××××××.hu
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Firefox+PaX+amazon.com
Date: Mon, 05 Nov 2007 01:38:16
Message-Id: 33615.138.26.140.45.1194226580.squirrel@atoth.sote.hu
1 On Vas, November 4, 2007 21:45, pageexec@××××××××.hu wrote:
2 > On 4 Nov 2007 at 21:02, atoth@××××××××××.hu wrote:
3 >
4 >> That was it.
5 >>
6 >> Please find the related stuff (pax.log, maps file, core dump) at:
7 >> http://atoth.sote.hu/~atoth/amazon-firefox-pax
8 >
9 > can you fix the file permissions? ;-)
10
11 Shame on me: permissions fixed.
12
13 >
14 > other than that, it looks like some legitimate runtime code generation
15 > from whatever module, up to you to disable MPROTECT on firefox and see
16 > if it gets further (it reduces safety of course).
17 >
18
19 My suspect is some kind of flash content. The issue can be handled by
20 noscript, however it means reduced functionality...
21 I give MPROTECT a try. But just for curiosity. I don't like the idea
22 running firefox without MPROTECT. I was disappointed when I had to turn of
23 MPROTECT on python to get python-UNO bridge running.
24
25 Regards,
26 Attila
27
28 > --
29 > gentoo-hardened@g.o mailing list
30 >
31
32
33 --
34 gentoo-hardened@g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] Firefox+PaX+amazon.com pageexec@××××××××.hu