Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 379179 - app-text/texlive-core-2010-r4: grsec: denied RWX mprotect of /usr/bin/mf by /usr/bin/mf, parent /usr/bin/mktextfm
Summary: app-text/texlive-core-2010-r4: grsec: denied RWX mprotect of /usr/bin/mf by /...
Status: RESOLVED DUPLICATE of bug 195688
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Development (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Alexis Ballier
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-08-14 16:30 UTC by Navid Zamani
Modified: 2011-08-19 00:20 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Navid Zamani 2011-08-14 16:30:26 UTC
Apparently, mf tries to make a data area executable, which for a hardened system is a large security risk, and hence is denied. So it crashes.

Reproducible: Always

Steps to Reproduce:
1. Be sure you use hardened-sources with “Security Options → Grsecurity → Security Level” set to “Hardened Gentoo [server]“, or something equivalent which sets CONFIG_PAX_MPROTECT=y.
1. Emerge dev-texlive/texlive-basic-2010 with all its dependencies. This should install texlive-core too.
Actual Results:  
$PORT_LOGDIR/build/dev-texlive/texlive-basic-2010:*.log* contains:

> This is a summary of all `failed' messages:
> `mf-nowin -ini  -jobname=mf -progname=mf -translate-file=cp227.tcx mf.ini' failed

And in the system log, one can see something like:

> Aug 14 17:55:17 [kernel] [125585.800404] grsec: From 192.168.0.2: denied RWX mprotect of /usr/bin/mf by /usr/bin/mf[mf-nowin:13542] uid/euid:0/0 gid/egid:0/0, parent /usr/bin/mktextfm[mktextfm:13496] uid/euid:0/0 gid/egid:0/0

Expected Results:  
mf should not try to “RWX mprotect”, and hence not be killed off. Which will make it possible for texlive-basic to be installed.

The same think happens with pdftex too. I read in bug #342581, that pdftex could be needed for texlive-basic too, but is missing in its dependencies. So if texlive-basic still doesn’t emerge with a fixed mf, try installing pdftex, if it’s not already installed.
Comment 1 Navid Zamani 2011-08-14 16:33:07 UTC
Corrections:
s/1\. Emerge/2. Emerge/
s/same think/same thing/
Comment 2 Navid Zamani 2011-08-14 19:11:09 UTC
Weirdly, chpax -m /usr/bin/mf doesn't work as a workaround for this. No idea why. :/
Comment 3 Alexis Ballier gentoo-dev 2011-08-15 07:51:23 UTC

*** This bug has been marked as a duplicate of bug 195688 ***