[gentoo-hardened] Re: denied resource overstep... for RLIMIT_MEMLOCK

[Grant <emailgrant@gmail.com>]

> One of my Blu-Ray rips won't play and there is a steady stream of
> "Error while decoding frame!" messages in mplayer's output when I try.
>  I just noticed that each time I try to play the movie, I get another
> one of these in dmesg:
>
> grsec: denied resource overstep by requesting 135168 for
> RLIMIT_MEMLOCK against limit 32768 for /usr/bin/mplayer[mplayer:22122]
> uid/euid:1000/1000 gid/egid:100/100, parent /bin/bash[bash:22095]
> uid/euid:1000/1000 gid/egid:100/100
>
> I tried:
>
> paxctl -m /usr/bin/mplayer
>
> but it doesn't seem to make any difference.  Does anyone know how to
> fix this?  How can I undo what I did with the above paxctl command
> since it doesn't seem to be helping?
>
> - Grant

I should have checked this before posting but I actually get the same
grsec message when playing movies in mplayer that work perfectly fine.
 Is there any need to do anything based on the message?

I also noticed this in dmesg on a different system and I'm wondering about it:

PAX: execution attempt in:
/usr/lib64/opengl/nvidia/lib/libGLcore.so.177.82,
6b8d6f990000-6b8d6fd20000 00c1b000
PAX: terminating task: /usr/bin/Xorg(X):14958, uid/euid: 0/0, PC:
00006b8d6fc665d0, SP: 000077eb50bd1258
PAX: bytes at PC: 64 48 8b 04 25 68 ff ff ff ff a0 10 08 00 00 cc cc cc cc cc
PAX: bytes at SP-8:

- Grant