From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org)
	by finch.gentoo.org with esmtp (Exim 4.60)
	(envelope-from <gentoo-hardened+bounces-2372-garchives=archives.gentoo.org@lists.gentoo.org>)
	id 1LOOxq-0002A4-Ti
	for garchives@archives.gentoo.org; Sun, 18 Jan 2009 04:08:47 +0000
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id 288CDE0374;
	Sun, 18 Jan 2009 04:08:45 +0000 (UTC)
Received: from mail-bw0-f21.google.com (mail-bw0-f21.google.com [209.85.218.21])
	by pigeon.gentoo.org (Postfix) with ESMTP id D21B9E0374
	for <gentoo-hardened@lists.gentoo.org>; Sun, 18 Jan 2009 04:08:44 +0000 (UTC)
Received: by bwz14 with SMTP id 14so6466288bwz.10
        for <gentoo-hardened@lists.gentoo.org>; Sat, 17 Jan 2009 20:08:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:received:received:message-id:date:from:to
         :subject:in-reply-to:mime-version:content-type
         :content-transfer-encoding:content-disposition:references;
        bh=+VvGxqPhdDj4WlxsoNc9FjqeKpiJLUgAlxNSxMGHMFg=;
        b=bQ/3v2I/7y5yxkN+vPLx8DcCPMGFMtEu6aDOy0/82oIzPnJVytdHF8ZjS6KkvVPBu4
         f2FfxyIFsHnpQmRMCvNYMqlH5t+5paWaCvEjInt6IEDDUp2/IBFckTBiwGfHTfRHaLIW
         EPxnKEAagQTouYcCAfJGbx5qEB7GXh7ol3tNA=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:in-reply-to:mime-version
         :content-type:content-transfer-encoding:content-disposition
         :references;
        b=MNCZw3VlgIiospCxdWC9aV/g6cU/LgtXVKP/lgupw9INyfP0CruDwuVCxhGrxmK02F
         TKlRam/TXT/khToxaasxsOr3gF9vQJgq0V/8tVFJOaAzXq+bKvThOqdxQugWBvVXFTuc
         bRdsE5Qup838W9LfobGfN6Cbk+j7Sz7nFnhKQ=
Received: by 10.181.221.15 with SMTP id y15mr329150bkq.121.1232251724160;
        Sat, 17 Jan 2009 20:08:44 -0800 (PST)
Received: by 10.180.208.18 with HTTP; Sat, 17 Jan 2009 20:08:44 -0800 (PST)
Message-ID: <49bf44f10901172008h4e934c1s421aefbc4837b97a@mail.gmail.com>
Date: Sat, 17 Jan 2009 20:08:44 -0800
From: Grant <emailgrant@gmail.com>
To: gentoo-hardened@lists.gentoo.org
Subject: Re: [gentoo-hardened] denied resource overstep... for RLIMIT_MEMLOCK
In-Reply-To: <497280FE.16011.8DB6416@pageexec.freemail.hu>
Precedence: bulk
List-Post: <mailto:gentoo-hardened@lists.gentoo.org>
List-Help: <mailto:gentoo-hardened+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-hardened+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-hardened+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-hardened.gentoo.org>
X-BeenThere: gentoo-hardened@lists.gentoo.org
Reply-to: gentoo-hardened@lists.gentoo.org
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <49726977.17183.87F7E16@pageexec.freemail.hu>
	 <20090118002049.E299FE0429@pigeon.gentoo.org>
	 <497280FE.16011.8DB6416@pageexec.freemail.hu>
X-Archives-Salt: 403b5192-d452-47f8-9c34-3b82a7c7d007
X-Archives-Hash: 1bf542c5f99a79836d1245736a65cfc2

>> No, he's correct. He wanted to undo paxctl -m.
>
> ah, undoing. it's still not correct for the reason i told you.
> -zex is the base state, as the manpage says as well...

Thanks, -zex did it.  /usr/bin/mplayer no longer shows up with 'qlist
-ao | scanelf -f - -q -x'.

- Grant


>> On Sat, 17 Jan 2009 23:27:51 +0100, pageexec@freemail.hu wrote:
>> > On 17 Jan 2009 at 11:06, Grant wrote:
>> >
>> > > >>  Does anyone know how to
>> > > >> fix this?  How can I undo what I did with the above paxctl command
>> > > >> since it doesn't seem to be helping?
>> > > >
>> > > > man paxctl would tell you if you looked ;).
>> > >
>> > > Thanks, it's 'paxctl -M /usr/bin/mplayer'.
>> >
>> > you mean -m, -M would enforce MPROTECT when in softmode.