Re: [gentoo-hardened] RLIMIT_MEMLOCK but can't paxctl -m

["Javier J. Martínez Cabezón" <tazok.id0@gmail.com>]

I think is ulimit related (I'm not an grsec user) look for ulimit.

2009/1/25 Grant <emailgrant@gmail.com>:
>> PaX flags only marks elf files not scripts.
>
> Is there anything I can do about the "denied resource overstep by
> requesting 135168 for
> RLIMIT_MEMLOCK"?
>
> - Grant
>
>
>>>> can you put the output of file /usr/bin/miro?
>>>
>>> That file is just:
>>>
>>> #!/bin/sh
>>> miro.real "$@"
>>>
>>> and /usr/bin/miro.real is a python script.
>>>
>>> - Grant
>>>
>>>
>>>>> I'm getting:
>>>>>
>>>>> grsec: denied resource overstep by requesting 135168 for
>>>>> RLIMIT_MEMLOCK against limit 32768 for
>>>>> /usr/bin/miro.real[miro.real:12965] uid/euid:1000/1000
>>>>> gid/egid:100/100, parent /usr/bin/miro[miro:12964] uid/euid:1000/1000
>>>>> gid/egid:100/100
>>>>>
>>>>> but both 'paxctl -m /usr/bin/miro' and 'paxctl -m /usr/bin/miro.real'
>>>>> return "file is not a valid ELF executable".  Am I using the wrong
>>>>> command?
>>>>>
>>>>> - Grant
>
>