Bug 582558

Summary:	dev-qt/qtwebengine: grsec: denied RWX mmap of <anonymous mapping> by /usr/lib64/qt5/libexec/QtWebEngineProcess
Product:	Gentoo Linux	Reporter:	Alpha Bravo <aos>
Component:	Current packages	Assignee:	Qt Bug Alias <qt>
Status:	RESOLVED FIXED
Severity:	normal	CC:	4nykey, atoth, erikdenstore+gbugs, jaak
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=579712
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	A patch to qtwebengine-5.7.0.ebuild

Description Alpha Bravo 2016-05-09 11:39:58 UTC

dev-qt/qtwebengine-5.6.0 grsec: denied RWX mmap of <anonymous mapping> by /usr/lib64/qt5/libexec/QtWebEngineProcess

leads to segfault at runtime (tested with www-client/qupzilla-2.0.0: loading websites is impossible).

Paxmarking m /usr/lib64/qt5/libexec/QtWebEngineProcess on hardened solves this problem.

Comment 1 4nykey 2016-11-28 07:03:14 UTC

Created attachment 454574 [details, diff]
A patch to qtwebengine-5.7.0.ebuild

This adopts how it's done in www-client/chromium: first buiild and paxmark mksnapshot (bug #579712) to be able to build the rest, then paxmark QtWebEngineProcess.

Comment 2 Michael Palimaka (kensington) gentoo-dev

2016-12-06 07:25:24 UTC

Thanks, fixed in git by Aric Belsito.

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c774a4445fb38143628450af34608353efc1bd78