Bug 388135

Summary:	kde-base/nsplugins: does not work well will GrSecurity when loading or detecting adobe-flash
Product:	Gentoo Linux	Reporter:	mori rámar <moriramar>
Component:	Hardened	Assignee:	The Gentoo Linux Hardened Team <hardened>
Status:	RESOLVED INVALID
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	x86
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description mori rámar 2011-10-22 18:32:18 UTC

Without paxctl -m /usr/bin/nspluginscan and paxctl -m /usr/bin/nspluginviewer, To detect or load adobe-flash does not work.

/var/log/kern.log:
Oct 23 02:18:07 moriramar-S000 kernel: grsec: denied RWX mprotect of /opt/Adobe/flash-player/plugin/libflashplayer.so by /usr/bin/nspluginscan[nspluginscan:26962] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/nspluginscan[nspluginscan:26961] uid/euid:1000/1000 gid/egid:1000/1000
Oct 23 02:20:21 moriramar-S000 kernel: grsec: denied RWX mprotect of /opt/Adobe/flash-player/plugin/libflashplayer.so by /usr/bin/nspluginviewer[nspluginviewer:32168] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/kdeinit4[konqueror:10586] uid/euid:1000/1000 gid/egid:1000/1000

I am not sure whether this is intended behaviour and did not test with any other nsplugins.

Reproducible: Always