Gentoo Archives: gentoo-hardened

From: pageexec@××××××××.hu
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Re: denied resource overstep... for RLIMIT_MEMLOCK
Date: Fri, 16 Jan 2009 07:50:44
Message-Id: 49703C1A.21813.11B6ED39@pageexec.freemail.hu
In Reply to: [gentoo-hardened] Re: denied resource overstep... for RLIMIT_MEMLOCK by Grant
1 On 15 Jan 2009 at 18:05, Grant wrote:
2
3 > I also noticed this in dmesg on a different system and I'm wondering about it:
4 >
5 > PAX: execution attempt in:
6 > /usr/lib64/opengl/nvidia/lib/libGLcore.so.177.82,
7 > 6b8d6f990000-6b8d6fd20000 00c1b000
8 > PAX: terminating task: /usr/bin/Xorg(X):14958, uid/euid: 0/0, PC:
9 > 00006b8d6fc665d0, SP: 000077eb50bd1258
10 > PAX: bytes at PC: 64 48 8b 04 25 68 ff ff ff ff a0 10 08 00 00 cc cc cc cc cc
11 > PAX: bytes at SP-8:
12
13 i think you really need to read up on what PaX does... the above means
14 that Xorg wanted to execute runtime generated code therefore you'll need
15 to allow it, just like you already did for mplayer. not that it's great
16 for security...