Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 249528 - hardend xorg-server-1.5.x with ati-drivers gets killed by PAX
Summary: hardend xorg-server-1.5.x with ati-drivers gets killed by PAX
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Hardened (show other bugs)
Hardware: AMD64 Linux
: High minor (vote)
Assignee: The Gentoo Linux Hardened Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-12-01 21:14 UTC by Regin
Modified: 2009-05-06 11:34 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Regin 2008-12-01 21:14:53 UTC
xorg-server-1.5.x (tried with 1.5.2 & 1.5.3) crashes on startup when using ati binary video driver (ati-drivers-8.552-rx) and dri is enabled on this amd64 hardened workstation here. NO problem with xorg without dri or xorg-driver radeonhd! 

xorg-1.3.x runs flawless with same ati-drivers and default paxctl-settings... 

pax.log shows:
execution attempt in: <anonymous mapping>, 76760b38a000-76760b398000 76760b38a000
PAX: terminating task: /usr/bin/Xorg(X):4613, uid/euid: 0/0, PC: 000076760b390ac0, SP: 00007d9d28fe9218
PAX: bytes at PC: 55 c7 c0 4a 00 ff ff 48 8b ef 48 8b 45 00 0f ae 00 5d c3 00
PAX: bytes at SP-8:


Solution is to disable PAX mprotect-feature for xorg:
paxctl -m /usr/bin/Xorg



Reproducible: Always

Steps to Reproduce:
1.emerge >xorg-server-1.5.2 && emerge ati-drivers
2.set fglrx as video driver
3.startx

Actual Results:  
Gets killed by PAX-Control

Expected Results:  
should run fine

ebuild should run paxctl -m after install on hardened and binary xorg-drivers
Comment 1 Kari Hazzard 2008-12-06 12:54:15 UTC
This bug is a duplicate of http://bugs.gentoo.org/show_bug.cgi?id=244352

Though in both bug reports X is killed by a different thing (PaX versus the SSP system built into GCC in the hardened toolchain), the bug in xorg-server is the same in both.
Comment 2 Rémi Cardona (RETIRED) gentoo-dev 2009-05-06 11:34:19 UTC
bug 244352 has been fixed in the latest stable version of xorg-server.

If you can still reproduce with newer version of xorg-server, please don't hesitate to reopen this bug.

Thanks