media-sound/amarok-1.4.3-r1 crashes: grsec: denied resource overstep by requesting 135168 for RLIMIT_MEMLOCK against limit 32768 for /usr/bin/amarokapp[amarokapp:358540] uid/euid:1000/1000 gid/egid:100/100, parent /usr/bin/amarok[amarok:936188] uid/euid:1000/1000 gid/egid:100/100
Created attachment 107138 [details] emerge --info
localhost ~ # equery u amarok [ Searching for packages matching amarok... ] [ Colour Code : set unset ] [ Legend : Left column (U) - USE flags from make.conf ] [ : Right column (I) - USE flags packages was installed with ] [ Found these USE variables for media-sound/amarok-1.4.3-r1 ] U I + + aac : Enables support for MPEG-4 AAC Audio - - arts : Adds support for aRts: the KDE sound daemon - - debug : Enable extra debug codepaths, like asserts and extra output. If you want to get meaningful backtraces see http://www.gentoo.org/proj/en/qa/backtraces.xml . - - elibc_FreeBSD : <unknown> - - ifp : Enable support for iRiver devices access through libifp - - ipod : Enable support for iPod device access + + kde : Adds support for kde-base/kde (K Desktop Enviroment) - - linguas_az : <unknown> - - linguas_bg : <unknown> - - linguas_br : <unknown> - - linguas_ca : <unknown> - - linguas_cs : <unknown> - - linguas_cy : <unknown> - - linguas_da : <unknown> - - linguas_de : <unknown> - - linguas_el : <unknown> - - linguas_en_GB : <unknown> - - linguas_es : <unknown> - - linguas_et : <unknown> - - linguas_fi : <unknown> - - linguas_fr : <unknown> - - linguas_ga : <unknown> - - linguas_gl : <unknown> - - linguas_he : <unknown> - - linguas_hi : <unknown> - - linguas_hu : <unknown> - - linguas_is : <unknown> - - linguas_it : <unknown> - - linguas_ja : <unknown> - - linguas_ka : <unknown> - - linguas_km : <unknown> - - linguas_ko : <unknown> - - linguas_lt : <unknown> - - linguas_ms : <unknown> - - linguas_nb : <unknown> - - linguas_nl : <unknown> - - linguas_nn : <unknown> - - linguas_pa : <unknown> - - linguas_pl : <unknown> - - linguas_pt : <unknown> - - linguas_pt_BR : <unknown> - - linguas_ro : <unknown> - - linguas_ru : <unknown> - - linguas_rw : <unknown> - - linguas_sl : <unknown> - - linguas_sr : <unknown> - - linguas_sr@Latn : <unknown> - - linguas_sv : <unknown> - - linguas_ta : <unknown> - - linguas_tg : <unknown> - - linguas_th : <unknown> - - linguas_tr : <unknown> - - linguas_uk : <unknown> - - linguas_uz : <unknown> - - linguas_zh_CN : <unknown> - - linguas_zh_TW : <unknown> + + mysql : Adds mySQL Database support - - njb : Enable support for NJB (Creative) devices access through libnjb - - noamazon : Disable support for downloading covers from amazon.com + + opengl : Adds support for OpenGL (3D graphics) - - postgres : Adds support for the postgresql database - - real : Build with real/helix player support + + visualization : Support visualization plugins through media-libs/libvisual - - xinerama : Add support for the xinerama X11 extension, which allows you to stretch your display across multiple monitors
Reopen with exact ebuild version and a backtrace: http://www.gentoo.org/proj/en/qa/backtraces.xml
The exact ebuild version did not change and is still the same as reported originally: media-sound/amarok-1.4.3-r1. Unfortunately, it is not currently possible to go through all the motions outlined in http://www.gentoo.org/proj/en/qa/backtraces.xml on the machine where this bug was observered, and I don't have another Gentoo machine at my disposal. So if the goal is to keep the bug count down, please go ahead and close this bug. It will certainly help that cause - or at least until someone else opens it. If on the other hand, the goal is to have software with no bugs, all that is needed to do to reproduce this bug, is to install media-sound/amarok-1.4.3-r1 on any of 2.6.19 hardened kernels and try to use it. Thanks
Well, reopen when you have time to provide the required info. Thanks.
Created attachment 110933 [details] amarokapp.log
Created attachment 110934 [details] emerge --info
Backtrace: Starting program: /usr/bin/amarokapp [Thread debugging using libthread_db enabled] [New Thread 58808057431056 (LWP 954529)] [New Thread 1082141024 (LWP 954533)] [New Thread 1090533728 (LWP 954535)] [Thread 1082141024 (LWP 954533) exited] [New Thread 1082141024 (LWP 954539)] [Thread 1090533728 (LWP 954535) exited] [Thread 1082141024 (LWP 954539) exited] [New Thread 1082141024 (LWP 954540)] [New Thread 1090533728 (LWP 954541)] [Thread 1090533728 (LWP 954541) exited] [Thread 1082141024 (LWP 954540) exited] [New Thread 1082141024 (LWP 954543)] [New Thread 1090533728 (LWP 954544)] [New Thread 1098926432 (LWP 954545)] [New Thread 1107319136 (LWP 954546)] [New Thread 1115711840 (LWP 954547)] [New Thread 1124104544 (LWP 954548)] [Thread 1124104544 (LWP 954548) exited] [New Thread 1124104544 (LWP 954552)] [Thread 1124104544 (LWP 954552) exited] [Thread 1115711840 (LWP 954547) exited] [Thread 1107319136 (LWP 954546) exited] [Thread 1098926432 (LWP 954545) exited] [Thread 1090533728 (LWP 954544) exited] [Thread 1082141024 (LWP 954543) exited] Program exited normally. Not sure how to produce a more meaningful backtrace in this case since I don't know where to put a breakpoint to generate a backtrace. Core file is not generated. HOWEVER, the following error is found in /var/log/grsec.log: Feb 21 18:54:57 localhost grsec: From 199.33.159.173: denied resource overstep by requesting 135168 for RLIMIT_MEMLOCK against limit 32768 for /usr/bin/amarokapp[amarokapp:954529] uid/euid:1000/1000 gid/egid:100/100, parent /usr/bin/gdb[gdb:954510] uid/euid:1000/1000 gid/egid:100/100 Ebuild: localhost ~ # equery u amarok [ Searching for packages matching amarok... ] [ Colour Code : set unset ] [ Legend : Left column (U) - USE flags from make.conf ] [ : Right column (I) - USE flags packages was installed with ] [ Found these USE variables for media-sound/amarok-1.4.5-r1 ] U I + + aac : Enables support for MPEG-4 AAC Audio - - arts : Adds support for aRts: the KDE sound daemon - - daap : Enable support for DAAP Music Sharing - + debug : Enable extra debug codepaths, like asserts and extra output. If you want to get meaningful backtraces see http://www.gentoo.org/proj/en/qa/backtraces.xml . - - elibc_FreeBSD : <unknown> - - ifp : Enable support for iRiver devices access through libifp - - ipod : Enable support for iPod device access + + kde : Adds support for kde-base/kde (K Desktop Enviroment) - - linguas_af : <unknown> - - linguas_ar : <unknown> - - linguas_az : <unknown> - - linguas_bg : <unknown> - - linguas_br : <unknown> - - linguas_ca : <unknown> - - linguas_cs : <unknown> - - linguas_cy : <unknown> - - linguas_da : <unknown> - - linguas_de : <unknown> - - linguas_el : <unknown> - - linguas_en_GB : <unknown> - - linguas_es : <unknown> - - linguas_et : <unknown> - - linguas_fa : <unknown> - - linguas_fi : <unknown> - - linguas_fr : <unknown> - - linguas_ga : <unknown> - - linguas_gl : <unknown> - - linguas_he : <unknown> - - linguas_hi : <unknown> - - linguas_hu : <unknown> - - linguas_is : <unknown> - - linguas_it : <unknown> - - linguas_ja : <unknown> - - linguas_ka : <unknown> - - linguas_km : <unknown> - - linguas_ko : <unknown> - - linguas_lt : <unknown> - - linguas_ms : <unknown> - - linguas_nb : <unknown> - - linguas_nl : <unknown> - - linguas_nn : <unknown> - - linguas_pa : <unknown> - - linguas_pl : <unknown> - - linguas_pt : <unknown> - - linguas_pt_BR : <unknown> - - linguas_ro : <unknown> - - linguas_ru : <unknown> - - linguas_rw : <unknown> - - linguas_se : <unknown> - - linguas_sk : <unknown> - - linguas_sl : <unknown> - - linguas_sq : <unknown> - - linguas_sr : <unknown> - - linguas_sr@Latn : <unknown> - - linguas_sv : <unknown> - - linguas_ta : <unknown> - - linguas_tg : <unknown> - - linguas_th : <unknown> - - linguas_tr : <unknown> - - linguas_uk : <unknown> - - linguas_uz : <unknown> - - linguas_zh_CN : <unknown> - - linguas_zh_TW : <unknown> - - mtp : Enable support for libMTP (Plays4Sure) devices access through libmtp - - musicbrainz : Enable support for MusicBrainz audio lookups (musicbrainz.org) + + mysql : Adds mySQL Database support - - njb : Enable support for NJB (Creative) devices access through libnjb - - noamazon : Disable support for downloading covers from amazon.com + + opengl : Adds support for OpenGL (3D graphics) - - postgres : Adds support for the postgresql database - - real : Build with real/helix player support + + visualization : Support visualization plugins through media-libs/libvisual - - xinerama : Add support for the xinerama X11 extension, which allows you to stretch your display across multiple monitors
This looks to be a hardened specific problem. Hardened, care to decipher what the error means and give feedback about what can be done to fix it?
Indeed hardened I'd be grateful if someone told me what grsec is trying to say.
