* [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m
@ 2009-01-25 15:12 Grant
2009-01-25 15:23 ` Javier J. Martínez Cabezón
2009-01-25 18:03 ` pageexec
0 siblings, 2 replies; 8+ messages in thread
From: Grant @ 2009-01-25 15:12 UTC (permalink / raw
To: gentoo-hardened
I'm getting:
grsec: denied resource overstep by requesting 135168 for
RLIMIT_MEMLOCK against limit 32768 for
/usr/bin/miro.real[miro.real:12965] uid/euid:1000/1000
gid/egid:100/100, parent /usr/bin/miro[miro:12964] uid/euid:1000/1000
gid/egid:100/100
but both 'paxctl -m /usr/bin/miro' and 'paxctl -m /usr/bin/miro.real'
return "file is not a valid ELF executable". Am I using the wrong
command?
- Grant
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m
2009-01-25 15:12 [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m Grant
@ 2009-01-25 15:23 ` Javier J. Martínez Cabezón
2009-01-25 15:28 ` Grant
2009-01-25 18:03 ` pageexec
1 sibling, 1 reply; 8+ messages in thread
From: Javier J. Martínez Cabezón @ 2009-01-25 15:23 UTC (permalink / raw
To: gentoo-hardened
can you put the output of file /usr/bin/miro?
2009/1/25 Grant <emailgrant@gmail.com>:
> I'm getting:
>
> grsec: denied resource overstep by requesting 135168 for
> RLIMIT_MEMLOCK against limit 32768 for
> /usr/bin/miro.real[miro.real:12965] uid/euid:1000/1000
> gid/egid:100/100, parent /usr/bin/miro[miro:12964] uid/euid:1000/1000
> gid/egid:100/100
>
> but both 'paxctl -m /usr/bin/miro' and 'paxctl -m /usr/bin/miro.real'
> return "file is not a valid ELF executable". Am I using the wrong
> command?
>
> - Grant
>
>
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m
2009-01-25 15:23 ` Javier J. Martínez Cabezón
@ 2009-01-25 15:28 ` Grant
2009-01-25 17:28 ` Javier J. Martínez Cabezón
0 siblings, 1 reply; 8+ messages in thread
From: Grant @ 2009-01-25 15:28 UTC (permalink / raw
To: gentoo-hardened
> can you put the output of file /usr/bin/miro?
That file is just:
#!/bin/sh
miro.real "$@"
and /usr/bin/miro.real is a python script.
- Grant
>> I'm getting:
>>
>> grsec: denied resource overstep by requesting 135168 for
>> RLIMIT_MEMLOCK against limit 32768 for
>> /usr/bin/miro.real[miro.real:12965] uid/euid:1000/1000
>> gid/egid:100/100, parent /usr/bin/miro[miro:12964] uid/euid:1000/1000
>> gid/egid:100/100
>>
>> but both 'paxctl -m /usr/bin/miro' and 'paxctl -m /usr/bin/miro.real'
>> return "file is not a valid ELF executable". Am I using the wrong
>> command?
>>
>> - Grant
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m
2009-01-25 15:28 ` Grant
@ 2009-01-25 17:28 ` Javier J. Martínez Cabezón
2009-01-25 17:35 ` Grant
0 siblings, 1 reply; 8+ messages in thread
From: Javier J. Martínez Cabezón @ 2009-01-25 17:28 UTC (permalink / raw
To: gentoo-hardened
PaX flags only marks elf files not scripts.
2009/1/25 Grant <emailgrant@gmail.com>:
>> can you put the output of file /usr/bin/miro?
>
> That file is just:
>
> #!/bin/sh
> miro.real "$@"
>
> and /usr/bin/miro.real is a python script.
>
> - Grant
>
>
>>> I'm getting:
>>>
>>> grsec: denied resource overstep by requesting 135168 for
>>> RLIMIT_MEMLOCK against limit 32768 for
>>> /usr/bin/miro.real[miro.real:12965] uid/euid:1000/1000
>>> gid/egid:100/100, parent /usr/bin/miro[miro:12964] uid/euid:1000/1000
>>> gid/egid:100/100
>>>
>>> but both 'paxctl -m /usr/bin/miro' and 'paxctl -m /usr/bin/miro.real'
>>> return "file is not a valid ELF executable". Am I using the wrong
>>> command?
>>>
>>> - Grant
>
>
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m
2009-01-25 17:28 ` Javier J. Martínez Cabezón
@ 2009-01-25 17:35 ` Grant
2009-01-25 17:38 ` Javier J. Martínez Cabezón
0 siblings, 1 reply; 8+ messages in thread
From: Grant @ 2009-01-25 17:35 UTC (permalink / raw
To: gentoo-hardened
> PaX flags only marks elf files not scripts.
Is there anything I can do about the "denied resource overstep by
requesting 135168 for
RLIMIT_MEMLOCK"?
- Grant
>>> can you put the output of file /usr/bin/miro?
>>
>> That file is just:
>>
>> #!/bin/sh
>> miro.real "$@"
>>
>> and /usr/bin/miro.real is a python script.
>>
>> - Grant
>>
>>
>>>> I'm getting:
>>>>
>>>> grsec: denied resource overstep by requesting 135168 for
>>>> RLIMIT_MEMLOCK against limit 32768 for
>>>> /usr/bin/miro.real[miro.real:12965] uid/euid:1000/1000
>>>> gid/egid:100/100, parent /usr/bin/miro[miro:12964] uid/euid:1000/1000
>>>> gid/egid:100/100
>>>>
>>>> but both 'paxctl -m /usr/bin/miro' and 'paxctl -m /usr/bin/miro.real'
>>>> return "file is not a valid ELF executable". Am I using the wrong
>>>> command?
>>>>
>>>> - Grant
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m
2009-01-25 17:35 ` Grant
@ 2009-01-25 17:38 ` Javier J. Martínez Cabezón
0 siblings, 0 replies; 8+ messages in thread
From: Javier J. Martínez Cabezón @ 2009-01-25 17:38 UTC (permalink / raw
To: gentoo-hardened
I think is ulimit related (I'm not an grsec user) look for ulimit.
2009/1/25 Grant <emailgrant@gmail.com>:
>> PaX flags only marks elf files not scripts.
>
> Is there anything I can do about the "denied resource overstep by
> requesting 135168 for
> RLIMIT_MEMLOCK"?
>
> - Grant
>
>
>>>> can you put the output of file /usr/bin/miro?
>>>
>>> That file is just:
>>>
>>> #!/bin/sh
>>> miro.real "$@"
>>>
>>> and /usr/bin/miro.real is a python script.
>>>
>>> - Grant
>>>
>>>
>>>>> I'm getting:
>>>>>
>>>>> grsec: denied resource overstep by requesting 135168 for
>>>>> RLIMIT_MEMLOCK against limit 32768 for
>>>>> /usr/bin/miro.real[miro.real:12965] uid/euid:1000/1000
>>>>> gid/egid:100/100, parent /usr/bin/miro[miro:12964] uid/euid:1000/1000
>>>>> gid/egid:100/100
>>>>>
>>>>> but both 'paxctl -m /usr/bin/miro' and 'paxctl -m /usr/bin/miro.real'
>>>>> return "file is not a valid ELF executable". Am I using the wrong
>>>>> command?
>>>>>
>>>>> - Grant
>
>
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m
2009-01-25 15:12 [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m Grant
2009-01-25 15:23 ` Javier J. Martínez Cabezón
@ 2009-01-25 18:03 ` pageexec
2009-01-25 19:08 ` Grant
1 sibling, 1 reply; 8+ messages in thread
From: pageexec @ 2009-01-25 18:03 UTC (permalink / raw
To: gentoo-hardened
On 25 Jan 2009 at 7:12, Grant wrote:
> I'm getting:
>
> grsec: denied resource overstep by requesting 135168 for
> RLIMIT_MEMLOCK against limit 32768 for
> /usr/bin/miro.real[miro.real:12965] uid/euid:1000/1000
> gid/egid:100/100, parent /usr/bin/miro[miro:12964] uid/euid:1000/1000
> gid/egid:100/100
>
> but both 'paxctl -m /usr/bin/miro' and 'paxctl -m /usr/bin/miro.real'
> return "file is not a valid ELF executable". Am I using the wrong
> command?
pax has nothing to do with such resource limits so paxctl won't 'fix'
them ;). 'man 1 bash' is your friend and look for 'ulimit' in there.
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m
2009-01-25 18:03 ` pageexec
@ 2009-01-25 19:08 ` Grant
0 siblings, 0 replies; 8+ messages in thread
From: Grant @ 2009-01-25 19:08 UTC (permalink / raw
To: gentoo-hardened
>> I'm getting:
>>
>> grsec: denied resource overstep by requesting 135168 for
>> RLIMIT_MEMLOCK against limit 32768 for
>> /usr/bin/miro.real[miro.real:12965] uid/euid:1000/1000
>> gid/egid:100/100, parent /usr/bin/miro[miro:12964] uid/euid:1000/1000
>> gid/egid:100/100
>>
>> but both 'paxctl -m /usr/bin/miro' and 'paxctl -m /usr/bin/miro.real'
>> return "file is not a valid ELF executable". Am I using the wrong
>> command?
>
> pax has nothing to do with such resource limits so paxctl won't 'fix'
> them ;). 'man 1 bash' is your friend and look for 'ulimit' in there.
Alright, thank you.
- Grant
^ permalink raw reply [flat|nested] 8+ messages in thread
end of thread, other threads:[~2009-01-25 19:08 UTC | newest]
Thread overview: 8+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-01-25 15:12 [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m Grant
2009-01-25 15:23 ` Javier J. Martínez Cabezón
2009-01-25 15:28 ` Grant
2009-01-25 17:28 ` Javier J. Martínez Cabezón
2009-01-25 17:35 ` Grant
2009-01-25 17:38 ` Javier J. Martínez Cabezón
2009-01-25 18:03 ` pageexec
2009-01-25 19:08 ` Grant
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox