Bug 365349

Summary:	media-gfx/blender needs 'paxctl -m /usr/bin/blender'
Product:	Gentoo Linux	Reporter:	Nikoli <nikoli>
Component:	Current packages	Assignee:	Luca Barbato <lu_zero>
Status:	RESOLVED OBSOLETE
Severity:	normal	CC:	graphics+disabled
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Nikoli 2011-04-29 20:18:44 UTC

After installing blender fails to run with hardened-sources:
[176947.195973] grsec: denied RWX mmap of <anonymous mapping> by /usr/bin/blender[blender:9699] uid/euid:1101/1101 gid/egid:1101/1101, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0
[176947.195997] blender[9699]: segfault at ffffffffffffffff ip 000003468ec425b1 sp 0000038a35231bf0 error 6 in i915g_dri.so[3468e9e9000+36b000]
[176947.196042] grsec: Segmentation fault occurred at ffffffffffffffff in /usr/bin/blender[blender:9699] uid/euid:1101/1101 gid/egid:1101/1101, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0
[176947.196081] grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/bin/blender[blender:9699] uid/euid:1101/1101 gid/egid:1101/1101, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0

paxctl -m /usr/bin/blender solves problem.

Comment 1 Diego Elio Pettenò (RETIRED) gentoo-dev

2012-07-16 00:56:18 UTC

This has been fixed already.

Comment 2 Nikoli 2012-07-16 12:15:23 UTC

blender-2.63a-r1.ebuild has 'pax-mark m "${WORKDIR}/install/blender"', but what about current stable 2.49b-r2?