Bug 675048 – dev-java/openjdk-bin-11.0.1_p13: fails to set pax markings

• Status: RESOLVED INVALID
• Product: Gentoo Linux

[Description Georgy Yakovlev 2019-01-10 01:54:04 UTC]

paxctl-ng -v /opt/openjdk-bin-11.0.1_p13/bin/java
/opt/openjdk-bin-11.0.1_p13/bin/java:
        XATTR_PAX : not found

 

which causes the following failure:

/opt/openjdk-bin-11.0.1_p13/bin/java --version
OpenJDK 64-Bit Server VM warning: INFO: os::commit_memory(0x000003b98498c000, 2555904, 1) failed; error='Operation not permitted' (errno=1)
#

There is insufficient memory for the Java Runtime Environment to continue.
Native memory allocation (mmap) failed to map 2555904 bytes for committing reserved memory.
An error report file with more information is saved as:
//hs_err_pid11.log
 

dmesg shows:

[10714610.987335] grsec: [fb46eb372fea] denied RWX mmap of <anonymous mapping> by /opt/openjdk-bin-11.0.1_p13/bin/java[java:40808] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[bash:40382] uid/euid:0/0 gid/egid:0/0

 

After setting:

paxctl-ng -m /opt/openjdk-bin-11.0.1_p13/bin/java

it works:

/opt/openjdk-bin-11.0.1_p13/bin/java --version
openjdk 11.0.1 2018-10-16
OpenJDK Runtime Environment AdoptOpenJDK (build 11.0.1+13)
OpenJDK 64-Bit Server VM AdoptOpenJDK (build 11.0.1+13, mixed mode)

[Comment 1 Miroslav Šulc 2019-01-23 09:44:03 UTC]

i don't have this issue on my hardened system.

# paxctl-ng -v /opt/openjdk-bin-11.0.1_p13/bin/java
/opt/openjdk-bin-11.0.1_p13/bin/java:
	XATTR_PAX : -em--

# /opt/openjdk-bin-11.0.1_p13/bin/java --version
openjdk 11.0.1 2018-10-16
OpenJDK Runtime Environment AdoptOpenJDK (build 11.0.1+13)
OpenJDK 64-Bit Server VM AdoptOpenJDK (build 11.0.1+13, mixed mode)

is the issue stil valid?

[Comment 2 Georgy Yakovlev 2019-01-23 18:14:30 UTC]

thanks for reminding me.
no, looks like it issue on my side. closing.