[EMAIL PROTECTED] <[EMAIL PROTECTED]> 2008-11-10 12:31: > I usually have some of these while I'm listening to music: > grsec: (atoth:U:/usr/bin/audacious) denied resource overstep by requesting > 135168 for RLIMIT_MEMLOCK against limit 32768 for > /usr/bin/audacious[audacious:24077] uid/euid:1000/1000 gid/egid:100/100, > parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0 > and usual report about signal 11s for eg. with java while browsing. Of > course that RLMIT_MEMLOCK value requested is not so insane like that for > perl & pwd.
Same here: grsec: denied resource overstep by requesting 69632 for RLIMIT_MEMLOCK against limit 32768 for /usr/bin/aplay[aplay:16674] uid/euid:1000/1000 gid/egid:1000/1000, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0 And for the perl forloop: grsec: denied resource overstep by requesting 4511036391424 for RLIMIT_STACK against limit 8388608 for /bin/pwd[pwd:18765] uid/euid:1000/1000 gid/egid:1000/1000, parent /bin/bash[bash:18636] uid/euid:1000/1000 gid/egid:1000/1000 For me, nothing ever crashed so I just started to ignore them. I did wonder at them though. > Question is: do you use a hardened toolchain pie-ssp enabled, or a > regular? It would be interesting to test it using a non-hardened userland > with a grsec-enabled kernel... $ eselect profile show Current make.profile symlink: /usr/portage/profiles/default/linux/amd64/2008.0/desktop $ uname -a Linux omnius 2.6.26-hardened-r2 #3 SMP Sat Oct 4 16:00:09 CDT 2008 x86_64 Intel(R) Xeon(R) CPU X3220 @ 2.40GHz GenuineIntel GNU/Linux I'll try with a 2.6.27 based one later today. Brian
