grsecurity forums

hello,

i have some problems with java (build 1.4.0_04-b04) (from j2sdk1.4.0_04).
in logs i have:

Code: Select all

kernel: grsec: signal 11 sent to (java:236) UID(1005) EUID(1005), parent (java:227) UID(1005) EUID(1005)


if javaapplication works some time i have plently of such logs.

i'm using chpax tool in startup scripts to set flags for this binary:

Code: Select all

 * Paging based PAGE_EXEC       : disabled
 * Trampolines                  : not emulated
 * mprotect()                   : not restricted
 * mmap() base                  : not randomized
 * ET_EXEC base                 : not randomized
 * Segmentation based PAGE_EXEC : disabled


i think problem is in java itself - it sends SIGSEGV signals to java-childs (but why??).
could somebody confirm my suspections. am i wrong?

btw: linux-2.4.21+grsecurity-1.9.10

regards,

imo wrote:i think problem is in java itself - it sends SIGSEGV signals to java-childs (but why??).

likely it's got nothing to do with PaX or grsec, but the java VM itself. as for the why, it can be many things, just-in-time compilation or threading problems are the most likely culprits. you may try to upgrade your glibc (linuxthreads) to see if it helps.

PaX Team wrote:likely it's got nothing to do with PaX or grsec, but the java VM itself. as for the why, it can be many things, just-in-time compilation or threading problems are the most likely culprits. you may try to upgrade your glibc (linuxthreads) to see if it helps.

ok, thx.