when running thunderbird, it crashes with following log messages in system log: Jan 15 09:20:52 minishax kernel: PAX: execution attempt in: <anonymous mapping>, 615839114000-61583911c000 615839114000 Jan 15 09:20:52 minishax kernel: PAX: terminating task: /usr/lib64/thunderbird/thunderbird(thunderbird):5228, uid/euid: 1000/1000, PC: 0000615839114010, SP: 000070ab2c34e838 Jan 15 09:20:52 minishax kernel: PAX: bytes at PC: 49 bb 7c bb b3 51 58 61 00 00 49 ba 10 40 11 39 58 61 00 00 Jan 15 09:20:52 minishax kernel: PAX: bytes at SP-8: 000070ab2c34e860 000061584e6c21e7 000061581e3e0b20 28bcee2bac667000 000061582f4c8860 000061582f4c88b0 000070ab2c34e8b0 000061581d2e64ad 00006158390ad500 000061581e3e0b20 000070ab2c34e8b0 Jan 15 09:20:52 minishax kernel: grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/lib64/thunderbird/thunderbird[thunderbird:5228] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:5183] uid/euid:1000/1000 gid/egid:1000/1000 this is on hardened gentoo system. # emerge --info Portage 2.2.15 (python 2.7.9-final-0, hardened/linux/amd64, gcc-4.8.4, glibc-2.20-r1, 3.18.1-hardened-r1 x86_64) ================================================================= System uname: Linux-3.18.1-hardened-r1-x86_64-Intel-R-_Core-TM-_i7-4700HQ_CPU_@_2.40GHz-with-gentoo-2.2 KiB Mem: 24642796 total, 18609008 free KiB Swap: 0 total, 0 free Timestamp of tree: Thu, 15 Jan 2015 08:00:01 +0000 sh bash 4.3_p33 ld GNU ld (Gentoo 2.24 p1.4) 2.24 app-shells/bash: 4.3_p33 dev-java/java-config: 2.2.0 dev-lang/perl: 5.20.1-r4 dev-lang/python: 2.7.9-r1, 3.3.5-r1, 3.4.2 dev-util/cmake: 3.0.2 dev-util/pkgconfig: 0.28-r2 sys-apps/baselayout: 2.2 sys-apps/openrc: 0.13.6 sys-apps/sandbox: 2.6-r1 sys-devel/autoconf: 2.13, 2.69 sys-devel/automake: 1.10.3-r1, 1.11.6-r1, 1.14.1, 1.15 sys-devel/binutils: 2.24-r3 sys-devel/gcc: 4.8.4 sys-devel/gcc-config: 1.8 sys-devel/libtool: 2.4.4 sys-devel/make: 4.1-r1 sys-kernel/linux-headers: 3.18 (virtual/os-headers) sys-libs/glibc: 2.20-r1 Repositories: gentoo proaudio fordfrog x-portage ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="* -@EULA" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=native -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/gnupg/qualified.txt /usr/share/maven-bin-3.2/conf /var/bind /var/lib/hsqldb" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.3/ext-active/ /etc/php/cgi-php5.3/ext-active/ /etc/php/cli-php5.3/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=native -O2 -pipe" DISTDIR="/usr/portage/distfiles" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms sign strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://ftp.ntua.gr/pub/linux/gentoo/ http://gentoo.netnitco.net http://mirrors.rit.edu/gentoo/ http://tux.rainside.sk/gentoo/" LANG="cs_CZ.UTF-8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j9" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/src/proaudio.svn /usr/src/gentoo-fordfrog.git /usr/local/portage" USE="X a52 aac acl acpi alsa amd64 apng berkdb bluetooth bluray branding bzip2 cairo caps cdda cdr cjk cli consolekit cracklib crypt cups cxx dbus dri dts dv dvd encode exif ffmpeg flac fluidsynth fuse gdbm gif gimp gnome-keyring gphoto2 gpm gtk gtk3 hardened iconv icu id3tag ios iptc ipv6 jack jackmidi jpeg jpeg2k justify ladspa lash lcms libnotify lm_sensors lto mad matroska midi mikmod mjpeg mmx mmxext mng mod modplug modules mp3 mp4 mpeg mtp multilib ncurses networkmanager nls nptl ogg openexr opengl openmp orc pam pango pax_kernel pcre pdf png policykit pulseaudio qt3support qt4 quicktime raw readline scanner sdl session smp smpeg spell sse sse2 sse3 sse4 sse4_1 sse4_2 ssl ssse3 startup-notification svg tiff timidity truetype udev udisks unicode upower urandom usb vdpau vorbis wacom wxwidgets x264 xattr xcb xkb xml xmp xtpax xv xvid xvmc zlib" ABI_X86="32 64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_core authn_dbm authn_default authn_file authz_core authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp rewrite setenvif socache_shmcb speling status unique_id unixd userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev keyboard mouse synaptics wacom" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="cs cs_CZ de de_DE en en_GB en_US es es_ES it it_IT ja ja_JP pl pl_PL pt pt_PT ru ru_RU sk sk_SK zh zh_CN zh_HK zh_TW" NETBEANS_MODULES="*" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_3" RUBY_TARGETS="ruby19 ruby20" SANE_BACKENDS="genesys" USERLAND="GNU" VIDEO_CARDS="fbdev glx intel i915 i965 modesetting nouveau vesa" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, SYNC, USE_PYTHON
Please provide emerge firefox -pv, I am unable to duplicate on hardened system along with other users.
Portage 2.2.15 (python 2.7.9-final-0, hardened/linux/amd64/no-multilib, gcc-4.9.2, glibc-2.20-r1, 3.18.2-hardened x86_64) ================================================================= System Settings ================================================================= System uname: Linux-3.18.2-hardened-x86_64-Intel-R-_Core-TM-_i5-3337U_CPU_@_1.80GHz-with-gentoo-2.2 KiB Mem: 5974816 total, 3343400 free KiB Swap: 2097148 total, 2096488 free Timestamp of tree: Thu, 15 Jan 2015 23:45:01 +0000 sh bash 4.3_p33 ld GNU ld (Gentoo 2.24 p1.4) 2.24 ccache version 3.2.1 [enabled] app-shells/bash: 4.3_p33 dev-lang/perl: 5.20.1-r4 dev-lang/python: 2.7.9-r1, 3.3.5-r1 dev-util/ccache: 3.2.1-r1 dev-util/cmake: 3.0.2 dev-util/pkgconfig: 0.28-r2 sys-apps/baselayout: 2.2 sys-apps/openrc: 0.13.7 sys-apps/sandbox: 2.6-r1 sys-devel/autoconf: 2.13, 2.69 sys-devel/automake: 1.12.6, 1.14.1, 1.15 sys-devel/binutils: 2.24-r3 sys-devel/gcc: 4.9.2 sys-devel/gcc-config: 1.8 sys-devel/libtool: 2.4.4 sys-devel/make: 4.1-r1 sys-kernel/linux-headers: 3.18 (virtual/os-headers) sys-libs/glibc: 2.20-r1 Repositories: gentoo anarchy mozilla ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="* -@EULA" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-O2 -march=native -pipe -Wimplicit-function-declaration" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo" CXXFLAGS="-O2 -march=native -pipe -Wenum-compare" DISTDIR="/usr/portage/distfiles" EMERGE_DEFAULT_OPTS="--with-bdeps=y --quiet-build=y" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs ccache config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms sign strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://distfiles.gentoo.org" LANG="en_US.UTF-8" LC_ALL="en_US.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-O1 -Wl,--hash-style=gnu -Wl,--sort-common" MAKEOPTS="-j5 --no-print-directory" PKGDIR="/usr/portage/packages" PORTAGE_COMPRESS="xz" PORTAGE_COMPRESS_FLAGS="-z -9 -f -S .xz" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp/tmpfs" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/home/gentoo /home/mozilla" SYNC="rsync://rsync.namerica.gentoo.org/gentoo-portage" USE="X X509 a52 aac alsa amd64 apng avx berkdb bidi branding bzip2 cairo cdda cdio clang cli consolekit cracklib crypt cxx dbus dri dts dvd ffmpeg flac freetype gdbm gpg gstreamer gtk hardened httpd iconv icu ipv6 jpeg justify libcanberra libffi libkms live lua lzma mad matroska mmx mmxext modules mpeg ncurses nptl ogg opengl openmp openssl pam pax_kernel pcre png policykit readline secure-delete session spell sqlite sse sse2 sse3 sse4_1 ssh ssl ssse3 stream svg tcpd theora threads tiff truetype udev udisks unicode upower urandom vcd vlm vorbis wxwindows x264 xattr xinerama xml xtpax xv xvid zlib" ABI_X86="64" ALSA_CARDS="hda-intel" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" GRUB_PLATFORMS="pc" INPUT_DEVICES="evdev synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_3" QEMU_SOFTMMU_TARGETS="aarch64 arm ppc64 x86_64" RUBY_TARGETS="ruby19 ruby20" USERLAND="GNU" VIDEO_CARDS="intel" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, INSTALL_MASK, PORTAGE_BUNZIP2_COMMAND, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON ================================================================= Package Settings ================================================================= www-client/firefox-35.0 was built with the following: USE="custom-cflags custom-optimization dbus gstreamer hardened minimal system-cairo system-icu system-jpeg system-libvpx system-sqlite wifi -bindist -debug (-gmp-autoupdate) -jit (-pgo) -pulseaudio (-selinux) -startup-notification -test" LINGUAS="-af -ar -as -ast -be -bg -bn_BD -bn_IN -br -bs -ca -cs -cy -da -de -el -en_GB -en_ZA -eo -es_AR -es_CL -es_ES -es_MX -et -eu -fa -fi -fr -fy_NL -ga_IE -gd -gl -gu_IN -he -hi_IN -hr -hu -hy_AM -id -is -it -ja -kk -km -kn -ko -lt -lv -mai -mk -ml -mr -nb_NO -nl -nn_NO -or -pa_IN -pl -pt_BR -pt_PT -rm -ro -ru -si -sk -sl -son -sq -sr -sv_SE -ta -te -th -tr -uk -vi -xh -zh_CN -zh_TW" CFLAGS="-march=native -pipe -Wimplicit-function-declaration -mno-avx" CXXFLAGS="-march=native -pipe -Wenum-compare -mno-avx" LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-O1 -Wl,--hash-style=gnu -Wl,--sort-common -Wl,-z,relro,-z,now"
Portage 2.2.15 (python 2.7.9-final-0, hardened/linux/amd64, gcc-4.8.4, glibc-2.20-r1, 3.18.2-hardened-r1 x86_64) ================================================================= System Settings ================================================================= System uname: Linux-3.18.2-hardened-r1-x86_64-Intel-R-_Core-TM-_i7-4700HQ_CPU_@_2.40GHz-with-gentoo-2.2 KiB Mem: 24642796 total, 18247152 free KiB Swap: 0 total, 0 free Timestamp of tree: Sat, 17 Jan 2015 08:30:01 +0000 sh bash 4.3_p33 ld GNU ld (Gentoo 2.24 p1.4) 2.24 app-shells/bash: 4.3_p33 dev-java/java-config: 2.2.0 dev-lang/perl: 5.20.1-r4 dev-lang/python: 2.7.9-r1, 3.3.5-r1, 3.4.2 dev-util/cmake: 3.1.0 dev-util/pkgconfig: 0.28-r2 sys-apps/baselayout: 2.2 sys-apps/openrc: 0.13.7 sys-apps/sandbox: 2.6-r1 sys-devel/autoconf: 2.13, 2.69 sys-devel/automake: 1.10.3-r1, 1.11.6-r1, 1.14.1, 1.15 sys-devel/binutils: 2.24-r3 sys-devel/gcc: 4.8.4 sys-devel/gcc-config: 1.8 sys-devel/libtool: 2.4.4 sys-devel/make: 4.1-r1 sys-kernel/linux-headers: 3.18 (virtual/os-headers) sys-libs/glibc: 2.20-r1 Repositories: gentoo proaudio fordfrog x-portage ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="* -@EULA" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=native -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/gnupg/qualified.txt /usr/share/maven-bin-3.2/conf /var/bind /var/lib/hsqldb" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.3/ext-active/ /etc/php/cgi-php5.3/ext-active/ /etc/php/cli-php5.3/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=native -O2 -pipe" DISTDIR="/usr/portage/distfiles" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms sign strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://ftp.ntua.gr/pub/linux/gentoo/ http://gentoo.netnitco.net http://mirrors.rit.edu/gentoo/ http://tux.rainside.sk/gentoo/" LANG="cs_CZ.UTF-8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j9" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/src/proaudio.svn /usr/src/gentoo-fordfrog.git /usr/local/portage" USE="X a52 aac acl acpi alsa amd64 apng berkdb bluetooth bluray branding bzip2 cairo caps cdda cdr cjk cli consolekit cracklib crypt cups cxx dbus dri dts dv dvd encode exif ffmpeg flac fluidsynth fuse gdbm gif gimp gnome-keyring gphoto2 gpm gtk gtk3 hardened iconv icu id3tag ios iptc ipv6 jack jackmidi jpeg jpeg2k justify ladspa lash lcms libnotify lm_sensors lto mad matroska midi mikmod mjpeg mmx mmxext mng mod modplug modules mp3 mp4 mpeg mtp multilib ncurses networkmanager nls nptl ogg openexr opengl openmp orc pam pango pax_kernel pcre pdf png policykit pulseaudio qt3support qt4 quicktime raw readline scanner sdl session smp smpeg spell sse sse2 sse3 sse4 sse4_1 sse4_2 ssl ssse3 startup-notification svg tiff timidity truetype udev udisks unicode upower urandom usb vdpau vorbis wacom wxwidgets x264 xattr xcb xkb xml xmp xtpax xv xvid xvmc zlib" ABI_X86="32 64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_core authn_dbm authn_default authn_file authz_core authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp rewrite setenvif socache_shmcb speling status unique_id unixd userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev keyboard mouse synaptics wacom" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="cs cs_CZ de de_DE en en_GB en_US es es_ES it it_IT ja ja_JP pl pl_PL pt pt_PT ru ru_RU sk sk_SK zh zh_CN zh_HK zh_TW" NETBEANS_MODULES="*" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_3" RUBY_TARGETS="ruby19 ruby20" SANE_BACKENDS="genesys" USERLAND="GNU" VIDEO_CARDS="fbdev glx intel i915 i965 modesetting nouveau vesa" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, SYNC, USE_PYTHON ================================================================= Package Settings ================================================================= mail-client/thunderbird-31.4.0 was built with the following: USE="crypt dbus hardened lightning minimal pulseaudio startup-notification -bindist -custom-cflags -custom-optimization -debug -gstreamer -jit -ldap -mozdom (-selinux) -system-cairo -system-icu -system-jpeg -system-libvpx -system-sqlite" ABI_X86="64" LINGUAS="cs de en_GB es_ES it ja pl pt_PT ru sk zh_CN zh_TW -ar -ast -be -bg -bn_BD -br -ca -da -el -es_AR -et -eu -fi -fr -fy_NL -ga_IE -gd -gl -he -hr -hu -hy_AM -id -is -ko -lt -nb_NO -nl -nn_NO -pa_IN -pt_BR -rm -ro -si -sl -sq -sr -sv_SE -ta_LK -tr -uk -vi" CFLAGS="-march=native -pipe -Wno-return-type -w -mno-avx" CXXFLAGS="-march=native -pipe -Wno-return-type -w -mno-avx" LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-z,relro,-z,now"
*** Bug 539268 has been marked as a duplicate of this bug. ***
same picture here with changed use flags system* : Feb 8 19:20:19 t44 kernel: [47417.853020] PAX: execution attempt in: <anonymous mapping>, 3e19d701000-3e19d705000 3e19d701000 Feb 8 19:20:19 t44 kernel: [47417.853024] PAX: terminating task: /usr/lib64/thunderbird/thunderbird(thunderbird):27367, uid/euid: 1000/1000, PC: 000003e19d703278, SP: 000003f95a227b48 Feb 8 19:20:19 t44 kernel: [47417.853026] PAX: bytes at PC: 49 bb 6e 2a 13 99 e1 03 00 00 49 ba 78 32 70 9d e1 03 00 00 Feb 8 19:20:19 t44 kernel: [47417.853051] PAX: bytes at SP-8: 000003f95a227ce0 000003e1938b4653 0000000000000000 000003f95a227ec8 000003f95a227e80 000003e19a995f71 000003e1ffffffff 0000000000000000 000003e1895689d0 000003e19d6d6800 000003f900000000 Feb 8 19:20:19 t44 kernel: [47417.853345] grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/lib64/thunderbird/thunderbird[thunderbird:27367] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:20552] uid/euid:1000/1000 gid/egid:1000/1000 t44 ~ # emerge --info thunderbird | tail ================================================================= Package Settings ================================================================= mail-client/thunderbird-31.4.0 was built with the following: USE="crypt dbus hardened lightning minimal system-cairo system-icu system-jpeg system-libvpx system-sqlite -bindist -custom-cflags -custom-optimization -debug -gstreamer -jit -ldap -mozdom -pulseaudio (-selinux) -startup-notification" ABI_X86="64" LINGUAS="en_GB -ar -ast -be -bg -bn_BD -br -ca -cs -da -de -el -es_AR -es_ES -et -eu -fi -fr -fy_NL -ga_IE -gd -gl -he -hr -hu -hy_AM -id -is -it -ja -ko -lt -nb_NO -nl -nn_NO -pa_IN -pl -pt_BR -pt_PT -rm -ro -ru -si -sk -sl -sq -sr -sv_SE -ta_LK -tr -uk -vi -zh_CN -zh_TW" CFLAGS="-pipe -march=native -Wno-return-type -w -mno-avx" CXXFLAGS="-pipe -march=native -Wno-return-type -w -mno-avx" LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-z,relro,-z,now"
31.5.0 is affected too Feb 27 07:37:22 minishax kernel: PAX: execution attempt in: <anonymous mapping>, 68956a863000-68956a864000 68956a863000 Feb 27 07:37:22 minishax kernel: PAX: terminating task: /usr/lib64/thunderbird/thunderbird(thunderbird):5438, uid/euid: 1000/1000, PC: 000068956a863010, SP: 000077422a0977d8 Feb 27 07:37:22 minishax kernel: PAX: bytes at PC: 49 bb 7c 8b bf 85 95 68 00 00 49 ba 10 30 86 6a 95 68 00 00 Feb 27 07:37:22 minishax kernel: PAX: bytes at SP-8: 000077422a097800 000068958276ad37 000077422a097810 38b7e9411d7b0500 000068956217c240 000068956217c290 000077422a097840 0000689555ee643f 000077422a097840 38b7e9411d7b0500 000077422a097840 Feb 27 07:37:22 minishax kernel: grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/lib64/thunderbird/thunderbird[thunderbird:5438] uid/euid:1000/1000 gid/egid:1000/1000, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0 # emerge --info thunderbird | tail ================================================================= Package Settings ================================================================= mail-client/thunderbird-31.5.0::gentoo was built with the following: USE="crypt dbus hardened lightning minimal pulseaudio startup-notification -bindist -custom-cflags -custom-optimization -debug -gstreamer -jit -ldap -mozdom (-selinux) -system-cairo -system-icu -system-jpeg -system-libvpx -system-sqlite" ABI_X86="64" LINGUAS="cs de en_GB es_ES it ja pl pt_PT ru sk zh_CN zh_TW -ar -ast -be -bg -bn_BD -br -ca -da -el -es_AR -et -eu -fi -fr -fy_NL -ga_IE -gd -gl -he -hr -hu -hy_AM -id -is -ko -lt -nb_NO -nl -nn_NO -pa_IN -pt_BR -rm -ro -si -sl -sq -sr -sv_SE -ta_LK -tr -uk -vi" CFLAGS="-march=native -pipe -Wno-return-type -w -mno-avx" CXXFLAGS="-march=native -pipe -Wno-return-type -w -mno-avx" LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-z,relro,-z,now"
mail-client/thunderbird-31.6.0 is affected too. Apr 7 09:10:21 minishax kernel: PAX: execution attempt in: <anonymous mapping>, 64e4759e6000-64e4759ea000 64e4759e6000 Apr 7 09:10:21 minishax kernel: PAX: terminating task: /usr/lib64/thunderbird/thunderbird(thunderbird):7137, uid/euid: 1000/1000, PC: 000064e4759e6010, SP: 0000711af548c3c8 Apr 7 09:10:21 minishax kernel: PAX: bytes at PC: 49 bb 7c 8b 1f 90 e4 64 00 00 49 ba 10 60 9e 75 e4 64 00 00 Apr 7 09:10:21 minishax kernel: PAX: bytes at SP-8: 0000711af548c3f0 000064e48cd6eda7 0000711af548c400 a3f64cb90f326800 000064e46c581640 000064e46c581690 0000711af548c430 000064e4608e643f 0000711af548c430 a3f64cb90f326800 0000711af548c430 Apr 7 09:10:21 minishax kernel: grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/lib64/thunderbird/thunderbird[thunderbird:7137] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:7107] uid/euid:1000/1000 gid/egid:1000/1000
unfortunatelly the only working version which was 31.3.0 is gone now so there is no easy way to revert to a working version of thunderbird. 06 Apr 2015; Lars Wendler <polynomial-c@gentoo.org> -thunderbird-31.3.0.ebuild, +thunderbird-31.6.0.ebuild: Version bump. Removed old. could you please resurrect this version so that those of us that upgraded can downgrade to a working minor version of version 31?
i downgraded to 31.3.0 and now it crashes too so there's probably no point in resurrecting this version
as a workaround i use thunderbird-bin which seems to work fine
atm i'm using following version and it works fine: # equery list thunderbird * Searching for thunderbird ... [IP-] [ ] mail-client/thunderbird-38.1.0:0 # paxctl -v /usr/lib64/thunderbird/thunderbird PaX control v0.9 Copyright 2004,2005,2006,2007,2009,2010,2011,2012,2014 PaX Team <pageexec@freemail.hu> - PaX flags: -------x-e-- [/usr/lib64/thunderbird/thunderbird] RANDEXEC is disabled EMUTRAMP is disabled
If you feel I have closed your bug and it is still a current issue, please reopen and update it completely. We will not work bugs that have no ebuild in tree any longer or can not be reproduced with a current system. Thank You for your support and understanding The Mozilla Team
