Gentoo Archives: gentoo-hardened

From: "Javier J. Martínez Cabezón" <tazok.id0@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m
Date: Sun, 25 Jan 2009 17:38:46
Message-Id: 897813410901250938w305b4136vcae96eabdd3b1ad6@mail.gmail.com
In Reply to: Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m by Grant
1 I think is ulimit related (I'm not an grsec user) look for ulimit.
2
3 2009/1/25 Grant <emailgrant@×××××.com>:
4 >> PaX flags only marks elf files not scripts.
5 >
6 > Is there anything I can do about the "denied resource overstep by
7 > requesting 135168 for
8 > RLIMIT_MEMLOCK"?
9 >
10 > - Grant
11 >
12 >
13 >>>> can you put the output of file /usr/bin/miro?
14 >>>
15 >>> That file is just:
16 >>>
17 >>> #!/bin/sh
18 >>> miro.real "$@"
19 >>>
20 >>> and /usr/bin/miro.real is a python script.
21 >>>
22 >>> - Grant
23 >>>
24 >>>
25 >>>>> I'm getting:
26 >>>>>
27 >>>>> grsec: denied resource overstep by requesting 135168 for
28 >>>>> RLIMIT_MEMLOCK against limit 32768 for
29 >>>>> /usr/bin/miro.real[miro.real:12965] uid/euid:1000/1000
30 >>>>> gid/egid:100/100, parent /usr/bin/miro[miro:12964] uid/euid:1000/1000
31 >>>>> gid/egid:100/100
32 >>>>>
33 >>>>> but both 'paxctl -m /usr/bin/miro' and 'paxctl -m /usr/bin/miro.real'
34 >>>>> return "file is not a valid ELF executable". Am I using the wrong
35 >>>>> command?
36 >>>>>
37 >>>>> - Grant
38 >
39 >