Java and SIG11

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Java and SIG11

Postby eRAZOR » Wed Dec 29, 2004 2:34 pm

I'm running Debian Sarge with a "2.4.28-grsec #2 SMP Mon Dec 27 20:10:58 CET 2004 i686 GNU/Linux" Kernel. Everything is working great but Java gives me a lot of headache in the form of kern.log spam:

Code: Select all
Dec 29 19:37:08 localhost kernel: grsec: signal 11 sent to /usr/local/jre1.5.0/bin/java[java:23124] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/local/jre1.5.0/bin/java[java:5833] uid/euid:1000/1000 gid/egid:1000/1000
Dec 29 19:37:08 localhost last message repeated 3 times
Dec 29 19:37:08 localhost kernel: grsec: more alerts, logging disabled for 10 seconds


Please note this is after running chpax -Erspmv /usr/local/jre1.5.0/bin/java resulting in:

Code: Select all
----[ chpax 0.7 : Current flags for /usr/local/jre1.5.0/bin/java (pEmrxs) ]----

 * Paging based PAGE_EXEC       : disabled
 * Trampolines                  : emulated
 * mprotect()                   : not restricted
 * mmap() base                  : not randomized
 * ET_EXEC base                 : not randomized
 * Segmentation based PAGE_EXEC : disabled


I've also set the same flags for /usr/local/jre1.5.0/bin/* to no avail. Any suggestions?
eRAZOR
 
Posts: 8
Joined: Wed Dec 29, 2004 9:03 am

Return to grsecurity support