KDM Broken

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

KDM Broken

Postby bart_nessux » Sun Mar 07, 2004 9:43 pm

Howdy,

I built grsecurity (High) into a 2.4.22-gentoo-r7 kernel. Everything seems to work except for KDM/X... here's an excerpt from the logs:

Mar 7 13:38:25 localhost PAX: terminating task: /usr/X11R6/bin/XFree86(X):14145, uid/euid: 0/0, PC: 0826c058, SP: 581bd4cc
Mar 7 13:38:25 localhost PAX: bytes at PC: 55 89 e5 83 ec 08 8b 55 08 c7 04 24 a8 c3 26 08 89 15 b0 c3
Mar 7 13:38:25 localhost grsec: attempted resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 by (X:14145) UID(0) EUID(0), parent (kdm:31951) UID(0) EUID(0)
Mar 7 13:38:25 localhost kdm[31951]: X server for display :0 terminated unexpectedly
Mar 7 13:38:25 localhost kdm[31951]: Unable to fire up local display :0; disabling.

I'm running KDE 3.2. Everything works great (network, emerge, various shell apps) except for KDM. Any ideas? I'm new to grsecurity, would like to start using it on all my machines.

Thanks,
Bart
bart_nessux
 
Posts: 2
Joined: Sun Mar 07, 2004 9:40 pm

Postby siti » Sun Mar 07, 2004 11:59 pm

Code: Select all
emerge chpax
/etc/init.d/chpax start
rc-update add chpax default


That should make Xfree and a few other programs get exempted from Pax's protection so they can run!
siti
 
Posts: 18
Joined: Fri Aug 08, 2003 6:30 pm

Thanks

Postby bart_nessux » Mon Mar 08, 2004 12:12 pm

I emerged gradm lastnight and one of the packages downloaded was chpax... I'll give this a go tonight when I get home. Thanks again.

Bart :D
bart_nessux
 
Posts: 2
Joined: Sun Mar 07, 2004 9:40 pm


Return to grsecurity support

cron