Gentoo Archives: gentoo-hardened

From: "Ђорђе Тодоровић" <postmanmiler@×××××.com>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] Running Skype on Hardened
Date: Thu, 29 Mar 2012 17:15:18
Message-Id: 20120330171338.GA14158@Allegro
1 I am currently trying to run: net-im/skype on an amd64 non-multilib hardened
2 profile. I have grsec and pax enabled in kernel (.config in attachment), and I
3 am aware of this bug: [1], I am also aware that Skype is masked on hardened
4 profiles, but, while reading the bug report I saw mentions of some people
5 actually getting Skype to run on their machines.
6
7 When I try to run Skype, it dies with the message: "Killed!"
8 dmesg says:
9 "[98725.282864] grsec: denied RWX mmap of /opt/skype/skype by /opt/skype/skype[skype:19989] uid/euid:1000/1000 gid/egid:100/100, parent /bin/bash[bash:19519] uid/euid:1000/1000 gid/egid:100/100"
10
11 I tried using paxctl on $(which skype) but I get:
12 "file /usr/bin/skype is not a valid ELF executable"
13
14
15 I am subscribed to this list for two/three years now and I couldn't find any
16 mention of this problem.
17
18 Does anyone know:
19 "Why /usr/bin/skype isn't listed as a valid ELF executable on my machine" and
20 "Is is possible to run this thing anyhow on a hardened profile"?
21
22 1. https://bugs.gentoo.org/show_bug.cgi?id=302589
23 --
24 . O . | Djordje Todorovic [http://barabbas.github.com] | O . O
25 . . O | GPG-Key: 2048R/1E133339 (http://pgp.mit.edu) | . O O
26 O O O | BFF2 1C7F A70D ECCD FA8F C946 DB32 B498 1E13 3339 | . O .

Attachments

File name MIME type
.config text/plain
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-hardened] Running Skype on Hardened Sven Vermeulen <swift@g.o>