Gentoo Archives: gentoo-hardened

From: Grant <emailgrant@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] denied resource overstep... for RLIMIT_MEMLOCK
Date: Sat, 17 Jan 2009 19:06:45
Message-Id: 49bf44f10901171106y739a77dfq92ee52529b17df83@mail.gmail.com
In Reply to: Re: [gentoo-hardened] denied resource overstep... for RLIMIT_MEMLOCK by pageexec@freemail.hu
1 >> One of my Blu-Ray rips won't play and there is a steady stream of
2 >> "Error while decoding frame!" messages in mplayer's output when I try.
3 >> I just noticed that each time I try to play the movie, I get another
4 >> one of these in dmesg:
5 >>
6 >> grsec: denied resource overstep by requesting 135168 for
7 >> RLIMIT_MEMLOCK against limit 32768 for /usr/bin/mplayer[mplayer:22122]
8 >> uid/euid:1000/1000 gid/egid:100/100, parent /bin/bash[bash:22095]
9 >> uid/euid:1000/1000 gid/egid:100/100
10 >
11 > it's just a report that mplayer wanted to lock more memory than
12 > you allowed, or rather, what the kernel allows by default. ulimit(1)
13 > and related things are your friend.
14 >
15 >> paxctl -m /usr/bin/mplayer
16 >>
17 >> but it doesn't seem to make any difference.
18 >
19 > actually, that one is needed for certain win32 codecs.
20
21 I'm on amd64 anyway and mplayer-bin doesn't seem to be maintained these days.
22
23 >> Does anyone know how to
24 >> fix this? How can I undo what I did with the above paxctl command
25 >> since it doesn't seem to be helping?
26 >
27 > man paxctl would tell you if you looked ;).
28
29 Thanks, it's 'paxctl -M /usr/bin/mplayer'.
30
31 - Grant

Replies

Subject Author
Re: [gentoo-hardened] denied resource overstep... for RLIMIT_MEMLOCK pageexec@××××××××.hu