| Summary: | polkitd segmentation fault with grsecurity | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | abandoned account disabled email <zazdxscf+bugs.gentoo.org> |
| Component: | Hardened | Assignee: | The Gentoo Linux Hardened Team <hardened> |
| Status: | RESOLVED INVALID | ||
| Severity: | normal | CC: | zazdxscf+bugs.gentoo.org |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | AMD64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
|
Description
abandoned account disabled email
2015-09-02 18:14:31 UTC
My bad, the above is true only when this kernel config is unset: [ ] Use ELF program header marking aka CONFIG_PAX_PT_PAX_FLAGS which meant that all these existing pax flags were ignored: # paxctl -v /usr/lib64/polkit-1/polkitd PaX control v0.9 Copyright 2004,2005,2006,2007,2009,2010,2011,2012,2014 PaX Team <pageexec@freemail.hu> - PaX flags: -----m-x-e-r [/usr/lib64/polkit-1/polkitd] MPROTECT is disabled RANDEXEC is disabled EMUTRAMP is disabled RANDMMAP is disabled But this doesn't solve the delay problem, which means that there's something else(unrelated) that I didn't do right. For completeness, this is the same thing as reported above with paxctl, but with paxctl-ng, which actually led me to the realization due to the "PT_PAX" string : # paxctl-ng -v /usr/lib64/polkit-1/polkitd /usr/lib64/polkit-1/polkitd: PT_PAX : -emr- XATTR_PAX : not found Everything works now after recompiling kernel with CONFIG_PAX_PT_PAX_FLAGS set - solved the delay problem too. (I think, it didn't previously work because I only disabled mmprotect for polkitd, via XATTR_PAX) |