Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m

[Grant <emailgrant@gmail.com>]

> PaX flags only marks elf files not scripts.

Is there anything I can do about the "denied resource overstep by
requesting 135168 for
RLIMIT_MEMLOCK"?

- Grant


>>> can you put the output of file /usr/bin/miro?
>>
>> That file is just:
>>
>> #!/bin/sh
>> miro.real "$@"
>>
>> and /usr/bin/miro.real is a python script.
>>
>> - Grant
>>
>>
>>>> I'm getting:
>>>>
>>>> grsec: denied resource overstep by requesting 135168 for
>>>> RLIMIT_MEMLOCK against limit 32768 for
>>>> /usr/bin/miro.real[miro.real:12965] uid/euid:1000/1000
>>>> gid/egid:100/100, parent /usr/bin/miro[miro:12964] uid/euid:1000/1000
>>>> gid/egid:100/100
>>>>
>>>> but both 'paxctl -m /usr/bin/miro' and 'paxctl -m /usr/bin/miro.real'
>>>> return "file is not a valid ELF executable".  Am I using the wrong
>>>> command?
>>>>
>>>> - Grant