365349 – media-gfx/blender needs 'paxctl -m /usr/bin/blender'

Bug 365349 - media-gfx/blender needs 'paxctl -m /usr/bin/blender'

Summary: media-gfx/blender needs 'paxctl -m /usr/bin/blender'

Status:	RESOLVED OBSOLETE

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Luca Barbato

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2011-04-29 20:18 UTC by Nikoli
Modified:	2012-07-16 12:15 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Nikoli 2011-04-29 20:18:44 UTC

After installing blender fails to run with hardened-sources:
[176947.195973] grsec: denied RWX mmap of <anonymous mapping> by /usr/bin/blender[blender:9699] uid/euid:1101/1101 gid/egid:1101/1101, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0
[176947.195997] blender[9699]: segfault at ffffffffffffffff ip 000003468ec425b1 sp 0000038a35231bf0 error 6 in i915g_dri.so[3468e9e9000+36b000]
[176947.196042] grsec: Segmentation fault occurred at ffffffffffffffff in /usr/bin/blender[blender:9699] uid/euid:1101/1101 gid/egid:1101/1101, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0
[176947.196081] grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/bin/blender[blender:9699] uid/euid:1101/1101 gid/egid:1101/1101, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0

paxctl -m /usr/bin/blender solves problem.

Comment 1 Diego Elio Pettenò (RETIRED) gentoo-dev

2012-07-16 00:56:18 UTC

This has been fixed already.

Comment 2 Nikoli 2012-07-16 12:15:23 UTC

blender-2.63a-r1.ebuild has 'pax-mark m "${WORKDIR}/install/blender"', but what about current stable 2.49b-r2?