Gentoo Archives: gentoo-hardened

From:	PaX Team <pageexec@××××××××.hu>
To:	gentoo-hardened@l.g.o
Subject:	Re: [gentoo-hardened] denied marking stack executable
Date:	Wed, 16 Jul 2014 00:44:22
Message-Id:	`53C5CACE.10464.251DE46F@pageexec.freemail.hu`
In Reply to:	[gentoo-hardened] denied marking stack executable by Alex Efros

1	On 16 Jul 2014 at 0:47, Alex Efros wrote:
2
3	> 2014-07-15_21:38:42.73335 kern.alert: grsec: denied marking stack executable as requested by PT_GNU_STACK marking in /mnt/storage/games/DungeonDefenders/UDKGame/Binaries/DungeonDefenders-x86 by /lib32/ld-2.17.so[ld-linux.so.2:2818] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/ldd[ldd:2817] uid/euid:1000/1000 gid/egid:1000/1000
4	> 2014-07-15_21:38:42.73338 kern.alert: grsec: denied RWX mprotect of <stack> by /lib32/ld-2.17.so[ld-linux.so.2:2818] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/ldd[ldd:2817] uid/euid:1000/1000 gid/egid:1000/1000
5	>
6	> Looks like it can't be fixed using paxctl-ng, so how to work around it?
7
8	it could be fixed with disabling MPROTECT but this program probably just
9	has the usual buggy GNU_STACK marking so try execstack -c on it. if it has
10	self-checking logic however you'll need to resort to setting the PaX flags.