From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1LNe5X-0002VC-Et for garchives@archives.gentoo.org; Fri, 16 Jan 2009 02:05:35 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id CA7CBE05A2; Fri, 16 Jan 2009 02:05:32 +0000 (UTC) Received: from mail-bw0-f21.google.com (mail-bw0-f21.google.com [209.85.218.21]) by pigeon.gentoo.org (Postfix) with ESMTP id 64387E05A2 for ; Fri, 16 Jan 2009 02:05:32 +0000 (UTC) Received: by bwz14 with SMTP id 14so4119482bwz.10 for ; Thu, 15 Jan 2009 18:05:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:references; bh=kE/VxbXEIDHxOfgJhQp2bcZCBLS2KEP7Ri9vsnc1hiU=; b=HB2V7hwEENp0BiGHk0M75SrxJNVou5DnrtI58X5y6zHR6dG9ZjEjQz/ND9uN3F1T1j RD59yr4/hRiVAQW7cLfVP6kwTkQhVerJ8qBZUFP8zO5rC9lhbqXB/dzCqlILtmKAPh42 RQcDftg2qMw34Zf9KOZKsiGavFsOTbf2KYKB8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :references; b=jFvfamdQ0W/DZg98fyWvwJajiAd5OKI5GjxtO+zgOC0Hz4JUl/9zpv8F3hTbXbGOmR iSxKk/iMDh12OJ5a7NzKcf7THGUKf2Dl6cfCibbp6ulG3xITiGH9p052D2KYete8ve1a f+TrYORQHiLwULR2k5OMLXaJ5K4MKdD0APIAM= Received: by 10.181.20.6 with SMTP id x6mr646597bki.167.1232071531797; Thu, 15 Jan 2009 18:05:31 -0800 (PST) Received: by 10.180.208.18 with HTTP; Thu, 15 Jan 2009 18:05:31 -0800 (PST) Message-ID: <49bf44f10901151805i24de1607k9165f8a1e6772d67@mail.gmail.com> Date: Thu, 15 Jan 2009 18:05:31 -0800 From: Grant To: gentoo-hardened@lists.gentoo.org Subject: [gentoo-hardened] Re: denied resource overstep... for RLIMIT_MEMLOCK In-Reply-To: <49bf44f10901151755l3ccf6d1fnb54ec2575d99ead4@mail.gmail.com> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <49bf44f10901151755l3ccf6d1fnb54ec2575d99ead4@mail.gmail.com> X-Archives-Salt: 70ed816d-348a-4f1b-99a8-bea46682ace7 X-Archives-Hash: 223c2d8f3e9e54e51c24247de5ba35e1 > One of my Blu-Ray rips won't play and there is a steady stream of > "Error while decoding frame!" messages in mplayer's output when I try. > I just noticed that each time I try to play the movie, I get another > one of these in dmesg: > > grsec: denied resource overstep by requesting 135168 for > RLIMIT_MEMLOCK against limit 32768 for /usr/bin/mplayer[mplayer:22122] > uid/euid:1000/1000 gid/egid:100/100, parent /bin/bash[bash:22095] > uid/euid:1000/1000 gid/egid:100/100 > > I tried: > > paxctl -m /usr/bin/mplayer > > but it doesn't seem to make any difference. Does anyone know how to > fix this? How can I undo what I did with the above paxctl command > since it doesn't seem to be helping? > > - Grant I should have checked this before posting but I actually get the same grsec message when playing movies in mplayer that work perfectly fine. Is there any need to do anything based on the message? I also noticed this in dmesg on a different system and I'm wondering about it: PAX: execution attempt in: /usr/lib64/opengl/nvidia/lib/libGLcore.so.177.82, 6b8d6f990000-6b8d6fd20000 00c1b000 PAX: terminating task: /usr/bin/Xorg(X):14958, uid/euid: 0/0, PC: 00006b8d6fc665d0, SP: 000077eb50bd1258 PAX: bytes at PC: 64 48 8b 04 25 68 ff ff ff ff a0 10 08 00 00 cc cc cc cc cc PAX: bytes at SP-8: - Grant