Gentoo Archives: gentoo-hardened

From: Rumen Yotov <rumen_yotov@×××.bg>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] arts-1.3.0_grsec2_compile problem
Date: Sun, 03 Oct 2004 07:07:10
Message-Id: 1096787227.18094.26.camel@mymach.qrypto.org
1 Hi,
2 Usually i use Gnome, but also have QT, arts and sometimes kdelibs
3 installed.
4 But when emerging arts-1.3.0 grsec2 breaks the process. Disabling grsec2
5 (in /etc/init.d) does nothing as it seems this comes from grsec2-code in
6 the kernel itself.
7 here is the dmesg:
8 ...SKIP...- part1 before disabling grsec2
9 grsec: attempted resource overstep by requesting 1024 for RLIMIT_NOFILE
10 against limit 1024 by /usr/bin/postgres[postmaster:28855] uid/euid:70/70
11 gid/egid:70/70, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0
12 ...SKIP... - part2 after disabling grsec2
13 grsec: attempted resource overstep by requesting 4096 for RLIMIT_CORE
14 against limit 0 by
15 /var/tmp/portage/arts-1.3.0/work/arts-1.3.0/mcopidl/.libs/lt-mcopidl[lt-mcopidl:4517] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/make[make:4516] uid/euid:0/0 gid/egid:0/0
16 grsec: attempted resource overstep by requesting 4096 for RLIMIT_CORE
17 against limit 0 by
18 /var/tmp/portage/arts-1.3.0/work/arts-1.3.0/mcopidl/.libs/lt-mcopidl[lt-mcopidl:4526] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/make[make:4516] uid/euid:0/0 gid/egid:0/0
19 ...END...
20 Same in in /var/log/mesages.
21 One possible solution seems to be:
22 1.Disable grsec2 (part or all) functionality which is in the kernel
23 just for the emerge (don't know how yet, i'll check) if possible at all;
24 2.Compile a temporary kernel w/o grsec and emerge arts (not good);
25 3.Compile new kernel (mm,ck) and use it for the emerge (fairly good as i
26 may need such a kernel anyway - already had such but is old, before
27 changing the mobo).
28 Just a non-related question: could i use the 'default' spec GCC file
29 (change it manually) to compile something and after that restore the
30 default (hardened.spec)? Will this disable hardened-gcc use? Plus
31 disabling any flags if needed.
32 Should i file a BUG?
33 PS: using all ~x86, GCC-3.4.1-r3, quite full grsec2 & PaX. Also could
34 give more info on this.
35 Thanks
36 Rumen

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies