Gentoo Logo
Gentoo Spaceship

Installation:
Gentoo Handbook
Installation Docs

Documentation:
Home
Listing
About Gentoo
Philosophy
Social Contract

Resources:
Bug Tracker
Developer List
Discussion Forums
Gentoo BitTorrents
Gentoo Linux Enhancement Proposals
IRC Channels
Mailing Lists
Mirrors
Name and Logo Guidelines
Online Package Database
Security Announcements
Staffing Needs
Supporting Vendors
View our CVS

Graphics:
Logos and themes
Icons
ScreenShots

Miscellaneous Resources:
Gentoo Linux Store
Gentoo-hosted projects
IBM dW/Intel article archive




List Archive: gentoo-hardened
Navigation:
Lists: gentoo-hardened: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-hardened@g.o
From: atoth@...
Subject: Re: Firefox+PaX+amazon.com
Date: Sun, 4 Nov 2007 17:45:42 +0100 (CET)
On Vas, November 4, 2007 10:36, pageexec@... wrote:
> On 4 Nov 2007 at 7:54, atoth@... wrote:
>
>> FYI:
>> I've bumped Firefox to 2.0.0.8 a few hours ago.
>
> that's already obsolete ;-)

Sorry, it's 2.0.0.9...

>
>> I recompiled all plugins
>> and the noscript extension. Visiting amazon.com now results in a PaX
>> execution attempt. If I filter amazon using noscript and adblock, it
>> loads
>> fine.
>
> what's the exact PaX log? PaX triggers on all kinds of bad code execution
> attempts, be that due to simply buggy code (say, NULL deref) or deliberate
> attacks.

There was some NULLs also, but this one is called anonymous mapping. I
attach the maps file and the log.
The event is preceded by sig11 and it tries to dump core. No matter what I
set for ulimit -c (unlimit, 4096, etc...) it constantly complains about
RLIMIT_CORE 0 in the grsec.log. What else must be done to raise the core
limit?

>
> --
> gentoo-hardened@g.o mailing list
>
Attachment:
pax.log (Binary data)
Attachment:
maps (Binary data)
Replies:
Re: Firefox+PaX+amazon.com
-- pageexec
Navigation:
Lists: gentoo-hardened: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Firefox+PaX+amazon.com
Next by thread:
Re: Firefox+PaX+amazon.com
Previous by date:
Re: kernel upgrade problems: bad page state
Next by date:
Re: Firefox+PaX+amazon.com


Updated Jun 17, 2009

Donate to support our development efforts.

Gentoo Centric Hosting: vr.org

VR Hosted

Tek Alchemy

Tek Alchemy

SevenL.net

SevenL.net

php|architect

php|architect

Copyright 2001-2007 Gentoo Foundation, Inc. Questions, Comments? Email www@gentoo.org.