From: Alexander Tsoy <alexander@tsoy.me>
To: gentoo-hardened@lists.gentoo.org
Subject: Re: [gentoo-hardened] "grsec: denied RWX mprotect" doesn't kill app anymore
Date: Sun, 2 Nov 2014 01:04:30 +0300 [thread overview]
Message-ID: <20141102010430.5d1062fc@home.puleglot> (raw)
In-Reply-To: <20141101112151.5b6d7a07@maelstrom.zone>
В Sat, 1 Nov 2014 11:21:51 +0100
Amadeusz Sławiński <amade@asmblr.net> пишет:
> On Sat, 1 Nov 2014 12:08:23 +0200
> Alex Efros <powerman@powerman.name> wrote:
>
> > Hi!
> >
> > I wonder is something was changed in handling "grsec: denied RWX
> > mprotect"? Previously when I see this in kernel log it usually
> > result in killing app (and I've to run `paxctl-ng -m /that/app`),
> > but now it looks like this doesn't happens anymore. For example:
> >
>
> https://bugs.freedesktop.org/show_bug.cgi?id=73473
>
> OpenGL apps fallback to software rendering if they can't mmap
> executable memory.
Alex uses nvidia blob, so fdo bug is unrelated here:
> > # eselect opengl list
> > Available OpenGL implementations:
> > [1] nvidia *
> > [2] xorg-x11
--
Alexander Tsoy
next prev parent reply other threads:[~2014-11-01 22:04 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-11-01 10:08 [gentoo-hardened] "grsec: denied RWX mprotect" doesn't kill app anymore Alex Efros
2014-11-01 10:21 ` Amadeusz Sławiński
2014-11-01 22:04 ` Alexander Tsoy [this message]
2014-11-01 12:09 ` "Tóth Attila"
2014-11-08 22:51 ` Krzysztof Nowicki
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20141102010430.5d1062fc@home.puleglot \
--to=alexander@tsoy.me \
--cc=gentoo-hardened@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox