Bug 419513

Summary:	kde-base/nsplugins: nspluginsviewer needs to be pax-marked for hardened to ensure plugins such as flash continue to work as expected.
Product:	Gentoo Linux	Reporter:	Hongjiu Zhang <noctuorare>
Component:	[OLD] KDE	Assignee:	Gentoo KDE team <kde>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=463640
Whiteboard:
Package list:		Runtime testing required:	---

Description Hongjiu Zhang 2012-06-03 18:12:58 UTC

File "/usr/bin/nspluginsviewer" should be pax-marked to make it work with Flash or other plugins.

Ebuilds of firefox and opera have done similar work to plugin-container and opera, this might be acceptable for hardened desktop users.

Reproducible: Always

Actual Results:  
Before paxctl -m /usr/bin/nspluginviewer, opening flash will crash nspluginviewer, and kernel logs:

Jun  3 02:03:14 noctuorare-L001 kernel: PAX: execution attempt in: <anonymous mapping>, 2a0c7bcb000-2a0ca2eb000 2a0c7bcb000
Jun  3 02:03:14 noctuorare-L001 kernel: PAX: terminating task: /usr/bin/nspluginviewer(nspluginviewer):31300, uid/euid: 1000/1000, PC: 000002a0ca27af45, SP: 000003eb47e34d58
Jun  3 02:03:14 noctuorare-L001 kernel: PAX: bytes at PC: 55 48 8b ec 48 83 ec 30 48 89 5d e0 4c 89 65 d8 48 8d 5d e8 
Jun  3 02:03:14 noctuorare-L001 kernel: PAX: bytes at SP-8: 000002a0ca25d890 000002a0d06934df 480000001d5f498e 000003eb47e34d80 000003eb47e34e10 000002a0d069432a 000002a0ca087fb8 000003eb47e34e10 000002a0c9f98100 000002a0d0694192 000002a0c9cd7000

Comment 1 Andreas K. Hüttel archtester

2012-07-20 21:39:36 UTC

Done in 4.8.4-r1 and later, thanks!