Gentoo Archives: gentoo-hardened

From:	Grant <emailgrant@×××××.com>
To:	gentoo-hardened@l.g.o
Subject:	Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m
Date:	Sun, 25 Jan 2009 19:08:33
Message-Id:	`49bf44f10901251108t3d59eb4aif1b58d895c396a55@mail.gmail.com`
In Reply to:	Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m by pageexec@freemail.hu

1	>> I'm getting:
2	>>
3	>> grsec: denied resource overstep by requesting 135168 for
4	>> RLIMIT_MEMLOCK against limit 32768 for
5	>> /usr/bin/miro.real[miro.real:12965] uid/euid:1000/1000
6	>> gid/egid:100/100, parent /usr/bin/miro[miro:12964] uid/euid:1000/1000
7	>> gid/egid:100/100
8	>>
9	>> but both 'paxctl -m /usr/bin/miro' and 'paxctl -m /usr/bin/miro.real'
10	>> return "file is not a valid ELF executable". Am I using the wrong
11	>> command?
12	>
13	> pax has nothing to do with such resource limits so paxctl won't 'fix'
14	> them ;). 'man 1 bash' is your friend and look for 'ulimit' in there.
15
16	Alright, thank you.
17
18	- Grant