On Wed, 11 Sep 2013 19:55:13 +0200 Amadeusz Sławiński <[email protected]> wrote:
> [...] > > CONFIG_PAX_KERNEXEC_PLUGIN_METHOD_OR=y > > CONFIG_PAX_KERNEXEC_PLUGIN_METHOD="or" > CONFIG_PAX_KERNEXEC_PLUGIN_METHOD_OR: > This method is incompatible with binary only modules but > has a lower runtime overhead. > > Try using bts Yes, of course! Stupid me. This was it... thank you very much. Now there is another issue: kernel: grsec: denied RWX mmap of /usr/lib64/opengl/nvidia/lib/libGL.so.325.15 on pretty much everything, but it is a known issue: <https://bugs.gentoo.org/show_bug.cgi?id=433121> So I disabled CONFIG_PAX_MPROTECT for the moment.
