Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 448692 - media-gfx/darktable-1.1.1 crashes when used on hardened with the opencl use flag
Summary: media-gfx/darktable-1.1.1 crashes when used on hardened with the opencl use flag
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Dane Smith (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-12-26 19:01 UTC by Matthew Thode ( prometheanfire )
Modified: 2013-01-13 00:52 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
patch to darktable-1.1.1 ebuild (darktable-1.1.1-r1.patch,1.29 KB, patch)
2012-12-26 19:03 UTC, Matthew Thode ( prometheanfire )
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Matthew Thode ( prometheanfire ) archtester Gentoo Infrastructure gentoo-dev Security 2012-12-26 19:01:52 UTC
crashes with the following in dmesg

grsec: denied RWX mprotect of /lib64/ld-2.15.so by /usr/bin/darktable[darktable:28596] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:27258] uid/euid:1000/1000 gid/egid:1000/1000


Reproducible: Always
Comment 1 Matthew Thode ( prometheanfire ) archtester Gentoo Infrastructure gentoo-dev Security 2012-12-26 19:03:25 UTC
Created attachment 333394 [details, diff]
patch to darktable-1.1.1 ebuild
Comment 2 Tim Harder gentoo-dev 2013-01-12 18:39:07 UTC
Fixed in 1.1.2.
Comment 3 PaX Team 2013-01-12 20:20:03 UTC
did you guys find out what ld.so tried to mprotect to rwx? i have the feeling that there's a better solution here than disabling mprotect on the binary...
Comment 4 Matthew Thode ( prometheanfire ) archtester Gentoo Infrastructure gentoo-dev Security 2013-01-13 00:52:03 UTC
I have a feeling that it's something with opencl, but I'm not sure.  I didn't test that deeply.