Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 388135 - kde-base/nsplugins: does not work well will GrSecurity when loading or detecting adobe-flash
Summary: kde-base/nsplugins: does not work well will GrSecurity when loading or detect...
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Hardened (show other bugs)
Hardware: x86 Linux
: Normal normal (vote)
Assignee: The Gentoo Linux Hardened Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-10-22 18:32 UTC by mori rámar
Modified: 2011-12-10 05:38 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description mori rámar 2011-10-22 18:32:18 UTC 
Without paxctl -m /usr/bin/nspluginscan and paxctl -m /usr/bin/nspluginviewer, To detect or load adobe-flash does not work.

/var/log/kern.log:
Oct 23 02:18:07 moriramar-S000 kernel: grsec: denied RWX mprotect of /opt/Adobe/flash-player/plugin/libflashplayer.so by /usr/bin/nspluginscan[nspluginscan:26962] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/nspluginscan[nspluginscan:26961] uid/euid:1000/1000 gid/egid:1000/1000
Oct 23 02:20:21 moriramar-S000 kernel: grsec: denied RWX mprotect of /opt/Adobe/flash-player/plugin/libflashplayer.so by /usr/bin/nspluginviewer[nspluginviewer:32168] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/kdeinit4[konqueror:10586] uid/euid:1000/1000 gid/egid:1000/1000

I am not sure whether this is intended behaviour and did not test with any other nsplugins.

Reproducible: Always