maxima not working under grsec kernel

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

maxima not working under grsec kernel

Postby alan.d » Sat Jun 18, 2016 4:58 am

I can't tell how long this issue actually exists, but maxima segfaults under grsec kernels (works fine using vanilla kernels).
A few kernel versions back (but I do not remeber anymore, I guess some 4.4 release) maxima worked just fine.

Simply starting maxima from command-line results in a segfault, but there is nothing in the logs apart from the obvious:
Code: Select all
Jun 18 10:36:25 debian kernel: [   40.842254] grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/lib/maxima/5.38.0/binary-gcl/maxima[exe:1493] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:1486] uid/euid:1000/1000 gid/egid:1000/1000

strace: http://pastebin.com/uxgiTu0V
config: http://pastebin.com/YJL1YHnL

Code: Select all
Linux debian 4.5.0-2-grsec-amd64 #1 SMP Debian 4.5.7-1+grsec201606142010+1 (2016-06-17) x86_64 GNU/Linux

Code: Select all
user@debian:~$ getfattr -d /usr/lib/maxima/5.38.0/binary-gcl/maxima
getfattr: Removing leading '/' from absolute path names
# file: usr/lib/maxima/5.38.0/binary-gcl/maxima
user.pax.flags="em"
alan.d
 
Posts: 34
Joined: Mon Jul 07, 2014 8:20 am

Re: maxima not working under grsec kernel

Postby PaX Team » Sat Jun 18, 2016 9:10 am

does it work if you also disable ASLR ('r' flag) on the binary?
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: maxima not working under grsec kernel

Postby alan.d » Sat Jun 18, 2016 9:36 am

PaX Team wrote:does it work if you also disable ASLR ('r' flag) on the binary?


Oh :oops: that did the trick! It works! Thanks a lot!
alan.d
 
Posts: 34
Joined: Mon Jul 07, 2014 8:20 am


Return to grsecurity support

cron