On Fri, Mar 30, 2012 at 07:13:38PM +0200, Ђорђе Тодоровић wrote:
> I am currently trying to run: net-im/skype on an amd64 non-multilib hardened
> profile. I have grsec and pax enabled in kernel (.config in attachment), and I
> am aware of this bug: [1], I am also aware that Skype is masked on hardened
> profiles, but, while reading the bug report I saw mentions of some people
> actually getting Skype to run on their machines.
>
> When I try to run Skype, it dies with the message: "Killed!"
> dmesg says:
> "[98725.282864] grsec: denied RWX mmap of /opt/skype/skype by
> /opt/skype/skype[skype:19989] uid/euid:1000/1000 gid/egid:100/100, parent
> /bin/bash[bash:19519] uid/euid:1000/1000 gid/egid:100/100"
>
> I tried using paxctl on $(which skype) but I get:
> "file /usr/bin/skype is not a valid ELF executable"
You can try to make it a valid ELF header first, and then paxmark it.
I have the following for my Skype:
paxctl -C /opt/skype/skype
paxctl -me /opt/skype/skype
Wkr,
Sven Vermeulen
