Re: [gentoo-hardened] GLX and PaX small problem

[PaX logs are enough in the future ;-]
> PAX: execution attempt in: /usr/lib/opengl/nvidia/lib/libGL.so.1.0.6111,
> 2349b000-234aa000 00058000
> PAX: terminating task: /usr/X11R6/bin/glxinfo(glxinfo):19278, uid/euid:
> 0/0, PC: 234a4afc, SP: 595b9d2c
> PAX: bytes at PC: 65 a1 f0 ff ff ff ff a0 18 04 00 00 cc cc cc cc cc cc
> cc cc

ok, i think this is the GL API stubs and of course it's in .data or some
other writable section. you can verify it from a 

  readelf -e /usr/lib/opengl/nvidia/lib/libGL.so.1.0.6111

output. in any case, i think this is an nvidia library so we can't fix it.

> Also remember that after emerging xorg-X11-6.8.0-r1 (couldn't start X)
> so disabled all Pax flags on some binary (with the error) - maybe xinit,
> tried checking the binaries now but they are too many out there.
> Found it: /usr/X11R6/bin/Xorg (or at least keep an error on this).

that's not 'some' binary, it's the X server itself ;-).


--
gentoo-hardened@g.o mailing list