Gentoo Archives: gentoo-hardened

From: Grant <emailgrant@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m
Date: Sun, 25 Jan 2009 15:28:09
Message-Id: 49bf44f10901250728x1c8637b1n2b53450082a41a04@mail.gmail.com
In Reply to: Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m by "Javier J. Martínez Cabezón"
1 > can you put the output of file /usr/bin/miro?
2
3 That file is just:
4
5 #!/bin/sh
6 miro.real "$@"
7
8 and /usr/bin/miro.real is a python script.
9
10 - Grant
11
12
13 >> I'm getting:
14 >>
15 >> grsec: denied resource overstep by requesting 135168 for
16 >> RLIMIT_MEMLOCK against limit 32768 for
17 >> /usr/bin/miro.real[miro.real:12965] uid/euid:1000/1000
18 >> gid/egid:100/100, parent /usr/bin/miro[miro:12964] uid/euid:1000/1000
19 >> gid/egid:100/100
20 >>
21 >> but both 'paxctl -m /usr/bin/miro' and 'paxctl -m /usr/bin/miro.real'
22 >> return "file is not a valid ELF executable". Am I using the wrong
23 >> command?
24 >>
25 >> - Grant

Replies

Subject Author
Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m "Javier J. Martínez Cabezón" <tazok.id0@×××××.com>