signal 11 sent to java

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

signal 11 sent to java

Postby imo » Fri Jun 27, 2003 6:36 am

hello,

i have some problems with java (build 1.4.0_04-b04) (from j2sdk1.4.0_04).
in logs i have:
Code: Select all
kernel: grsec: signal 11 sent to (java:236) UID(1005) EUID(1005), parent (java:227) UID(1005) EUID(1005)

if javaapplication works some time i have plently of such logs.

i'm using chpax tool in startup scripts to set flags for this binary:
Code: Select all
 * Paging based PAGE_EXEC       : disabled
 * Trampolines                  : not emulated
 * mprotect()                   : not restricted
 * mmap() base                  : not randomized
 * ET_EXEC base                 : not randomized
 * Segmentation based PAGE_EXEC : disabled


i think problem is in java itself - it sends SIGSEGV signals to java-childs (but why??).
could somebody confirm my suspections. am i wrong?

btw: linux-2.4.21+grsecurity-1.9.10

regards,
imo
 
Posts: 2
Joined: Fri Jun 27, 2003 6:19 am

Re: signal 11 sent to java

Postby PaX Team » Fri Jun 27, 2003 11:22 am

imo wrote:i think problem is in java itself - it sends SIGSEGV signals to java-childs (but why??).
likely it's got nothing to do with PaX or grsec, but the java VM itself. as for the why, it can be many things, just-in-time compilation or threading problems are the most likely culprits. you may try to upgrade your glibc (linuxthreads) to see if it helps.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: signal 11 sent to java

Postby imo » Mon Jun 30, 2003 4:04 am

PaX Team wrote:likely it's got nothing to do with PaX or grsec, but the java VM itself. as for the why, it can be many things, just-in-time compilation or threading problems are the most likely culprits. you may try to upgrade your glibc (linuxthreads) to see if it helps.

ok, thx.
imo
 
Posts: 2
Joined: Fri Jun 27, 2003 6:19 am


Return to grsecurity support