Re: [gentoo-hardened] denied resource overstep... for RLIMIT_MEMLOCK

[Grant <emailgrant@gmail.com>]

>> One of my Blu-Ray rips won't play and there is a steady stream of
>> "Error while decoding frame!" messages in mplayer's output when I try.
>>  I just noticed that each time I try to play the movie, I get another
>> one of these in dmesg:
>>
>> grsec: denied resource overstep by requesting 135168 for
>> RLIMIT_MEMLOCK against limit 32768 for /usr/bin/mplayer[mplayer:22122]
>> uid/euid:1000/1000 gid/egid:100/100, parent /bin/bash[bash:22095]
>> uid/euid:1000/1000 gid/egid:100/100
>
> it's just a report that mplayer wanted to lock more memory than
> you allowed, or rather, what the kernel allows by default. ulimit(1)
> and related things are your friend.
>
>> paxctl -m /usr/bin/mplayer
>>
>> but it doesn't seem to make any difference.
>
> actually, that one is needed for certain win32 codecs.

I'm on amd64 anyway and mplayer-bin doesn't seem to be maintained these days.

>>  Does anyone know how to
>> fix this?  How can I undo what I did with the above paxctl command
>> since it doesn't seem to be helping?
>
> man paxctl would tell you if you looked ;).

Thanks, it's 'paxctl -M /usr/bin/mplayer'.

- Grant