Bug 572310 – x11-wm/enlightenment-0.20.2 requires MPROTECT disabled on hardened

• Product: Gentoo Linux
• Status: RESOLVED OBSOLETE

[Description Thomas Raschbacher 2016-01-18 21:45:11 UTC]

x11-wm/enlightenment-0.20.2 (and possibly earlier ones of same slot) requires MPROTECT disabled on hardened if composite rendering is switched to opengl


[20612.503819] PAX: execution attempt in: <anonymous mapping>, 35977b0e000-35977b0f000 35977b0e000
[20612.503824] PAX: terminating task: /usr/bin/enlightenment(enlightenment):26839, uid/euid: 1000/1000, PC: 0000035977b0e000, SP: 0000039952113ea8
[20612.503827] PAX: bytes at PC: 64 4c 8b 1c 25 b0 fe ff ff 41 ff a3 20 2d 00 00 64 4c 8b 1c 
[20612.503863] PAX: bytes at SP-8: 0000004e95d19f10 0000035961b91f2c 0000000000000000 c34fe93f01d51900 0000039952113f54 c34fe93f01d51900 0000000000000000 0000039952113f54 0000004e95d0f440 0000004e95d15c20 0000000000000000 
[20613.632761] PAX: execution attempt in: <anonymous mapping>, 3903da66000-3903da67000 3903da66000
[20613.632767] PAX: terminating task: /usr/bin/enlightenment(enlightenment):26886, uid/euid: 1000/1000, PC: 000003903da66000, SP: 000003c34f08b458
[20613.632770] PAX: bytes at PC: 64 4c 8b 1c 25 b0 fe ff ff 41 ff a3 20 2d 00 00 64 4c 8b 1c 
[20613.632777] PAX: bytes at SP-8: 0000001f1193bed0 0000039027af2f2c 0000000000000000 c42561c8a3ba7300 000003c34f08b504 c42561c8a3ba7300 0000000000000000 000003c34f08b504 0000001f119313f0 0000001f11937be0 0000000000000000 
[20614.753187] PAX: execution attempt in: <anonymous mapping>, 3af2574f000-3af25750000 3af2574f000
[20614.753193] PAX: terminating task: /usr/bin/enlightenment(enlightenment):26901, uid/euid: 1000/1000, PC: 000003af2574f000, SP: 000003eae98150f8
[20614.753196] PAX: bytes at PC: 64 4c 8b 1c 25 b0 fe ff ff 41 ff a3 20 2d 00 00 64 4c 8b 1c 
[20614.753203] PAX: bytes at SP-8: 0000002e3bd768d0 000003af0f85ef2c 0000000000000000 6d145405186baa00 000003eae98151a4 6d145405186baa00 0000000000000000 000003eae98151a4 0000002e3bd6be20 0000002e3bd725e0 0000000000000000 
[20615.875562] PAX: execution attempt in: <anonymous mapping>, 387466cf000-387466d0000 387466cf000
[20615.875567] PAX: terminating task: /usr/bin/enlightenment(enlightenment):26916, uid/euid: 1000/1000, PC: 00000387466cf000, SP: 000003a1e9523e78
[20615.875570] PAX: bytes at PC: 64 4c 8b 1c 25 b0 fe ff ff 41 ff a3 20 2d 00 00 64 4c 8b 1c 
[20615.875577] PAX: bytes at SP-8: 00000006a1c1f510 0000038730714f2c 0000000000000000 3645c77562fb9900 000003a1e9523f24 3645c77562fb9900 0000000000000000 000003a1e9523f24 00000006a1c14a30 00000006a1c1b220 0000000000000000 
[20617.010404] PAX: execution attempt in: <anonymous mapping>, 3c6eb26c000-3c6eb26d000 3c6eb26c000
[20617.010410] PAX: terminating task: /usr/bin/enlightenment(enlightenment):26931, uid/euid: 1000/1000, PC: 000003c6eb26c000, SP: 000003cc823f95b8
[20617.010413] PAX: bytes at PC: 64 4c 8b 1c 25 b0 fe ff ff 41 ff a3 20 2d 00 00 64 4c 8b 1c 
[20617.010420] PAX: bytes at SP-8: 0000007fc5b0ac90 000003c6d5328f2c 0000000000000000 011377f944d6e800 000003cc823f9664 011377f944d6e800 0000000000000000 000003cc823f9664 0000007fc5b001c0 0000007fc5b069a0 0000000000000000 
[20618.130011] PAX: execution attempt in: <anonymous mapping>, 331e09ab000-331e09ac000 331e09ab000
[20618.130016] PAX: terminating task: /usr/bin/enlightenment(enlightenment):26946, uid/euid: 1000/1000, PC: 00000331e09ab000, SP: 000003ac69560f38
[20618.130019] PAX: bytes at PC: 64 4c 8b 1c 25 b0 fe ff ff 41 ff a3 20 2d 00 00 64 4c 8b 1c 
[20618.130026] PAX: bytes at SP-8: 00000013fc080f90 00000331ca841f2c 0000000000000000 90f673df530acb00 000003ac69560fe4 90f673df530acb00 0000000000000000 000003ac69560fe4 00000013fc0764e0 00000013fc07cca0 0000000000000000 
[20619.259026] PAX: execution attempt in: <anonymous mapping>, 3ad984ce000-3ad984cf000 3ad984ce000
[20619.259032] PAX: terminating task: /usr/bin/enlightenment(enlightenment):26961, uid/euid: 1000/1000, PC: 000003ad984ce000, SP: 000003c8bc975108
[20619.259034] PAX: bytes at PC: 64 4c 8b 1c 25 b0 fe ff ff 41 ff a3 20 2d 00 00 64 4c 8b 1c 
[20619.259042] PAX: bytes at SP-8: 00000060f9cfdd10 000003ad82483f2c 0000000000000000 a91ad14ae5c55d00 000003c8bc9751b4 a91ad14ae5c55d00 0000000000000000 000003c8bc9751b4 00000060f9cf3210 00000060f9cf9a20 0000000000000000 
[20620.376105] PAX: execution attempt in: <anonymous mapping>, 3bf085a5000-3bf085a6000 3bf085a5000
[20620.376110] PAX: terminating task: /usr/bin/enlightenment(enlightenment):26977, uid/euid: 1000/1000, PC: 000003bf085a5000, SP: 000003dde0b6cc68
[20620.376113] PAX: bytes at PC: 64 4c 8b 1c 25 b0 fe ff ff 41 ff a3 20 2d 00 00 64 4c 8b 1c 
[20620.376120] PAX: bytes at SP-8: 0000001b3ddcb2d0 000003bef271ff2c 0000000000000000 3a0153142272ad00 000003dde0b6cd14 3a0153142272ad00 0000000000000000 000003dde0b6cd14 0000001b3ddc0820 0000001b3ddc6fe0 0000000000000000 

paxctl -m /usr/bin/enlightenment resolved this issue.

[Comment 1 SpanKY 2016-01-18 22:17:12 UTC]

see how you've built efl, and if building it with USE=oldlua makes it work

[Comment 2 Thomas Raschbacher 2016-02-17 06:21:00 UTC]

I can try later, but if MPROTECT is required when not using USE=oldlua maybe should apply that on hardened if that was the case (or on hardened in general) ?

[Comment 3 SpanKY 2016-02-21 18:16:38 UTC]

(In reply to Thomas Raschbacher from comment #2)

we need to gather data first to figure out when it's needed

[Comment 4 Thomas Raschbacher 2017-03-19 21:36:48 UTC]

still the case for 0.21.7 ..

it also still is only needed when opengl instead of software renderer is activated

[Comment 5 Thomas Raschbacher 2017-12-07 10:55:06 UTC]

I wonder if there is any point after removal of hardened sources ..
waht do you think?

https://www.gentoo.org/news/2017/08/19/hardened-sources-removal.html

[Comment 6 Thomas Raschbacher 2018-05-16 06:36:27 UTC]

no grsec anymore so not needed anymore