Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m

["Javier J. Martínez Cabezón" <tazok.id0@gmail.com>]

PaX flags only marks elf files not scripts.

2009/1/25 Grant <emailgrant@gmail.com>:
>> can you put the output of file /usr/bin/miro?
>
> That file is just:
>
> #!/bin/sh
> miro.real "$@"
>
> and /usr/bin/miro.real is a python script.
>
> - Grant
>
>
>>> I'm getting:
>>>
>>> grsec: denied resource overstep by requesting 135168 for
>>> RLIMIT_MEMLOCK against limit 32768 for
>>> /usr/bin/miro.real[miro.real:12965] uid/euid:1000/1000
>>> gid/egid:100/100, parent /usr/bin/miro[miro:12964] uid/euid:1000/1000
>>> gid/egid:100/100
>>>
>>> but both 'paxctl -m /usr/bin/miro' and 'paxctl -m /usr/bin/miro.real'
>>> return "file is not a valid ELF executable".  Am I using the wrong
>>> command?
>>>
>>> - Grant
>
>