Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 675048

Summary: dev-java/openjdk-bin-11.0.1_p13: fails to set pax markings
Product: Gentoo Linux Reporter: Georgy Yakovlev <gyakovlev>
Component: Current packagesAssignee: Java team <java>
Status: RESOLVED INVALID    
Severity: normal    
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Georgy Yakovlev archtester gentoo-dev 2019-01-10 01:54:04 UTC
paxctl-ng -v /opt/openjdk-bin-11.0.1_p13/bin/java
/opt/openjdk-bin-11.0.1_p13/bin/java:
        XATTR_PAX : not found

 

which causes the following failure:

/opt/openjdk-bin-11.0.1_p13/bin/java --version
OpenJDK 64-Bit Server VM warning: INFO: os::commit_memory(0x000003b98498c000, 2555904, 1) failed; error='Operation not permitted' (errno=1)
#

There is insufficient memory for the Java Runtime Environment to continue.
Native memory allocation (mmap) failed to map 2555904 bytes for committing reserved memory.
An error report file with more information is saved as:
//hs_err_pid11.log
 

dmesg shows:

[10714610.987335] grsec: [fb46eb372fea] denied RWX mmap of <anonymous mapping> by /opt/openjdk-bin-11.0.1_p13/bin/java[java:40808] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[bash:40382] uid/euid:0/0 gid/egid:0/0

 

After setting:

paxctl-ng -m /opt/openjdk-bin-11.0.1_p13/bin/java

it works:

/opt/openjdk-bin-11.0.1_p13/bin/java --version
openjdk 11.0.1 2018-10-16
OpenJDK Runtime Environment AdoptOpenJDK (build 11.0.1+13)
OpenJDK 64-Bit Server VM AdoptOpenJDK (build 11.0.1+13, mixed mode)
Comment 1 Miroslav Ć ulc gentoo-dev 2019-01-23 09:44:03 UTC
i don't have this issue on my hardened system.

# paxctl-ng -v /opt/openjdk-bin-11.0.1_p13/bin/java
/opt/openjdk-bin-11.0.1_p13/bin/java:
	XATTR_PAX : -em--

# /opt/openjdk-bin-11.0.1_p13/bin/java --version
openjdk 11.0.1 2018-10-16
OpenJDK Runtime Environment AdoptOpenJDK (build 11.0.1+13)
OpenJDK 64-Bit Server VM AdoptOpenJDK (build 11.0.1+13, mixed mode)

is the issue stil valid?
Comment 2 Georgy Yakovlev archtester gentoo-dev 2019-01-23 18:14:30 UTC
thanks for reminding me.
no, looks like it issue on my side. closing.