From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1LOGVJ-0005lJ-0W for garchives@archives.gentoo.org; Sat, 17 Jan 2009 19:06:45 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id B2BBFE0338; Sat, 17 Jan 2009 19:06:43 +0000 (UTC) Received: from mail-bw0-f21.google.com (mail-bw0-f21.google.com [209.85.218.21]) by pigeon.gentoo.org (Postfix) with ESMTP id 42267E0338 for ; Sat, 17 Jan 2009 19:06:43 +0000 (UTC) Received: by bwz14 with SMTP id 14so6209893bwz.10 for ; Sat, 17 Jan 2009 11:06:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:references; bh=TBMSR17/K4BU8yDnk5AGYMWQjsYDfxnp1PQyDPq/QNs=; b=V/+RV7I+oZ6YKmN//BifxT8OitW1xrYIRZhqLTLH9K1ac8Vla0IKLhW69W6nGENWhe nU3uxm2Pynq3guIa/hKFDkpGi5fyYJiU4v8yQ65Ux20VUTgaPPBrUdgDCkY7egOp2mXs 9MsGN8B5JBP604Wfz/CBhNc2FKEN1tNf8Me4M= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :references; b=uVBKElQYrIX8DlvXihhNBZSmAAncZx7DGKg4zerdiLsn9vyWDnymVmIp2hctl4b93L 464a4YfLqnwqjIRDnpnsQJdmkQec+VYuPK10t1MGWCxN+ggDR2BwnF4hKEEQUrDDG1jr JF0YhtIfjU6PF64XG9T9Gq8DiXA1ol7WhqnFY= Received: by 10.181.209.5 with SMTP id l5mr1355031bkq.76.1232219202529; Sat, 17 Jan 2009 11:06:42 -0800 (PST) Received: by 10.180.208.18 with HTTP; Sat, 17 Jan 2009 11:06:42 -0800 (PST) Message-ID: <49bf44f10901171106y739a77dfq92ee52529b17df83@mail.gmail.com> Date: Sat, 17 Jan 2009 11:06:42 -0800 From: Grant To: gentoo-hardened@lists.gentoo.org Subject: Re: [gentoo-hardened] denied resource overstep... for RLIMIT_MEMLOCK In-Reply-To: <49703C1A.20802.11B6ED58@pageexec.freemail.hu> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <49bf44f10901151755l3ccf6d1fnb54ec2575d99ead4@mail.gmail.com> <49703C1A.20802.11B6ED58@pageexec.freemail.hu> X-Archives-Salt: 8168b2b7-9092-4094-aa38-fd3bd5529be0 X-Archives-Hash: ab8fba4379617a3b0a308726b1efd769 >> One of my Blu-Ray rips won't play and there is a steady stream of >> "Error while decoding frame!" messages in mplayer's output when I try. >> I just noticed that each time I try to play the movie, I get another >> one of these in dmesg: >> >> grsec: denied resource overstep by requesting 135168 for >> RLIMIT_MEMLOCK against limit 32768 for /usr/bin/mplayer[mplayer:22122] >> uid/euid:1000/1000 gid/egid:100/100, parent /bin/bash[bash:22095] >> uid/euid:1000/1000 gid/egid:100/100 > > it's just a report that mplayer wanted to lock more memory than > you allowed, or rather, what the kernel allows by default. ulimit(1) > and related things are your friend. > >> paxctl -m /usr/bin/mplayer >> >> but it doesn't seem to make any difference. > > actually, that one is needed for certain win32 codecs. I'm on amd64 anyway and mplayer-bin doesn't seem to be maintained these days. >> Does anyone know how to >> fix this? How can I undo what I did with the above paxctl command >> since it doesn't seem to be helping? > > man paxctl would tell you if you looked ;). Thanks, it's 'paxctl -M /usr/bin/mplayer'. - Grant