Gentoo Archives: gentoo-hardened

From: Matthew Summers <msummers42@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] miro segfaults when PAX is not in softmode
Date: Sun, 05 Apr 2009 19:23:17
Message-Id: c8b556060904051223y6d7c6050l387b92ae76740b7a@mail.gmail.com
In Reply to: Re: [gentoo-hardened] miro segfaults when PAX is not in softmode by Gordon Malm
1 On Sun, Apr 5, 2009 at 1:42 PM, Gordon Malm <gengor@g.o> wrote:
2
3 > On Sunday, April 5, 2009 08:54:22 Grant wrote:
4 > > >> I use a program called miro a lot, but since upgrading to gcc-4.3.3,
5 > > >> it segfaults if I don't issue:
6 > > >
7 > > > what's the package name? or what ebuild do you use?
8 > > >
9 > > >> grsec: signal 11 sent to /usr/bin/miro.real[miro.real:19177]
10 > > >> uid/euid:1000/1000 gid/egid:100/100, parent /usr/bin/miro[miro:19176]
11 > > >> uid/euid:1000/1000 gid/egid:100/100
12 > > >>
13 > > >> and since miro.real is a python script:
14 > > >
15 > > > in that case you have to use paxctl on the python interpreter, not
16 > > > the script. but before that it's better to find out why it crashes,
17 > > > so you should produce a coredump and analyze it.
18 > >
19 > > Thank you, I ran 'paxctl -m /usr/bin/python' and now miro starts
20 > > without softmode enabled. I use the miro ebuild from this bug:
21 > >
22 > > http://bugs.gentoo.org/show_bug.cgi?id=131527
23 > >
24 > > - Gramt
25 >
26 > Don't know what miro is and didn't bother to look at the bug, but removing
27 > MPROTECT on python is not good. One alternative might be to write simple
28 > wrapper in C for miro and paxctl that instead.
29 >
30 > Gordon Malm (gengor)
31 >
32 >
33 Miro is a slick little IPTV client written mostly in python. It was
34 previously called democracy player or similar.
35
36 Removing MPROTECT on python is simply the wrong thing to do.
37
38 --
39 quantumsummers
40
41 quantumsummers@g.o
42 msummers42@×××××.com
43
44 "...there are no rules here -- we're trying to accomplish something."
45 - Thomas A. Edison

Replies

Subject Author
Re: [gentoo-hardened] miro segfaults when PAX is not in softmode Grant <emailgrant@×××××.com>