Bug 249528

Summary:	hardend xorg-server-1.5.x with ati-drivers gets killed by PAX
Product:	Gentoo Linux	Reporter:	Regin <bugs>
Component:	Hardened	Assignee:	The Gentoo Linux Hardened Team <hardened>
Status:	RESOLVED FIXED
Severity:	minor
Priority:	High
Version:	unspecified
Hardware:	AMD64
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Regin 2008-12-01 21:14:53 UTC

xorg-server-1.5.x (tried with 1.5.2 & 1.5.3) crashes on startup when using ati binary video driver (ati-drivers-8.552-rx) and dri is enabled on this amd64 hardened workstation here. NO problem with xorg without dri or xorg-driver radeonhd! 

xorg-1.3.x runs flawless with same ati-drivers and default paxctl-settings... 

pax.log shows:
execution attempt in: <anonymous mapping>, 76760b38a000-76760b398000 76760b38a000
PAX: terminating task: /usr/bin/Xorg(X):4613, uid/euid: 0/0, PC: 000076760b390ac0, SP: 00007d9d28fe9218
PAX: bytes at PC: 55 c7 c0 4a 00 ff ff 48 8b ef 48 8b 45 00 0f ae 00 5d c3 00
PAX: bytes at SP-8:


Solution is to disable PAX mprotect-feature for xorg:
paxctl -m /usr/bin/Xorg



Reproducible: Always

Steps to Reproduce:
1.emerge >xorg-server-1.5.2 && emerge ati-drivers
2.set fglrx as video driver
3.startx

Actual Results:  
Gets killed by PAX-Control

Expected Results:  
should run fine

ebuild should run paxctl -m after install on hardened and binary xorg-drivers

Comment 1 Kari Hazzard 2008-12-06 12:54:15 UTC

This bug is a duplicate of http://bugs.gentoo.org/show_bug.cgi?id=244352

Though in both bug reports X is killed by a different thing (PaX versus the SSP system built into GCC in the hardened toolchain), the bug in xorg-server is the same in both.

Comment 2 Rémi Cardona (RETIRED) gentoo-dev

2009-05-06 11:34:19 UTC

bug 244352 has been fixed in the latest stable version of xorg-server.

If you can still reproduce with newer version of xorg-server, please don't hesitate to reopen this bug.

Thanks