grsec, leaf bering and mplayer : ioperm() and iopl()

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

grsec, leaf bering and mplayer : ioperm() and iopl()

Postby Bibinsa » Sat Nov 08, 2003 6:38 pm

Hi.

I'm using a leaf bering 1.2 linux system (kernel 2.4.20 + grsec 1.9.9h) and I compiled mplayer 1.0pre2 for this system.

When I start to play a video, mplayer crashed.
Here is my syslog :

grsec: denied use of ioperm() by (mplayer:5855) UID(0) EUID(0), parent (sh:22435) UID(0) EUID(0)
grsec: denied use of iopl() by (mplayer:5855) UID(0) EUID(0), parent (sh:22435) UID(0) EUID(0)

I don't know what to do.. Should I recompile my kernel with differents grsec options or is it a mplayer problem ?

Thanks.
Bibinsa
 
Posts: 1
Joined: Sat Nov 08, 2003 6:28 pm

Postby spender » Tue Nov 11, 2003 10:35 am

strange that mplayer is trying to do that, since it's non-suid. I remember there being some suid fibplayer or something that comes with mplayer that was suid root and needed for something, but regardless, you have to disable the "disable raw i/o" feature of grsec.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm


Return to grsecurity support

cron