Bug 419513 – kde-base/nsplugins: nspluginsviewer needs to be pax-marked for hardened to ensure plugins such as flash continue to work as expected.

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Hongjiu Zhang 2012-06-03 18:12:58 UTC]

File "/usr/bin/nspluginsviewer" should be pax-marked to make it work with Flash or other plugins.

Ebuilds of firefox and opera have done similar work to plugin-container and opera, this might be acceptable for hardened desktop users.

Reproducible: Always

Actual Results:  
Before paxctl -m /usr/bin/nspluginviewer, opening flash will crash nspluginviewer, and kernel logs:

Jun  3 02:03:14 noctuorare-L001 kernel: PAX: execution attempt in: <anonymous mapping>, 2a0c7bcb000-2a0ca2eb000 2a0c7bcb000
Jun  3 02:03:14 noctuorare-L001 kernel: PAX: terminating task: /usr/bin/nspluginviewer(nspluginviewer):31300, uid/euid: 1000/1000, PC: 000002a0ca27af45, SP: 000003eb47e34d58
Jun  3 02:03:14 noctuorare-L001 kernel: PAX: bytes at PC: 55 48 8b ec 48 83 ec 30 48 89 5d e0 4c 89 65 d8 48 8d 5d e8 
Jun  3 02:03:14 noctuorare-L001 kernel: PAX: bytes at SP-8: 000002a0ca25d890 000002a0d06934df 480000001d5f498e 000003eb47e34d80 000003eb47e34e10 000002a0d069432a 000002a0ca087fb8 000003eb47e34e10 000002a0c9f98100 000002a0d0694192 000002a0c9cd7000

[Comment 1 Andreas K. Hüttel 2012-07-20 21:39:36 UTC]

Done in 4.8.4-r1 and later, thanks!