Created attachment 311665 [details]
On my hardened ~amd64 machine with gcc-4.6.2 the test-suite of p7zip fails with the following error message.
Testing 7za433_7zip_lzma/bin/7za.exe Data Error
Sub items Errors: 1
ERROR during : /var/tmp/portage/app-arch/p7zip-9.20.1-r1/work/p7zip_9.20.1/check/../bin/7za t ../test/7za433_7zip_lzma.7z
Created attachment 311667 [details]
Could you help be on debugging?
I'll try. I poked around in grsec.log and found the following entries:
May 14 22:17:00 localhost kernel: [160743.267718] grsec: From 192.168.0.194: denied RWX mmap of <anonymous mapping> by /var/tmp/portage/app-arch/p7zip-9.20.1-r1/work/p7zip_9.20.1/bin/7z[7z:2257] uid/euid:250/250 gid/egid:250/250, parent /var/tmp/portage/app-arch/p7zip-9.20.1-r1/work/p7zip_9.20.1/check/check.sh[check.sh:2245] uid/euid:250/250 gid/egid:250/250
I then tried decompression manually and got the same error. I then disabled mprotect via 'paxctl -m /usr/lib64/p7zip/7za' and then the decompression went smoothly. I hope this helps.
is it okay if I mark 7za -m?
This seems to be gone with on version 9.20.1-r5.