|Main Archive Page > Month Archives > gentoo-hardened archives|
On Sun, Apr 5, 2009 at 1:42 PM, Gordon Malm <email@example.com> wrote:
> On Sunday, April 5, 2009 08:54:22 Grant wrote:
> > >> I use a program called miro a lot, but since upgrading to gcc-4.3.3,
> > >> it segfaults if I don't issue:
> > >
> > > what's the package name? or what ebuild do you use?
> > >
> > >> grsec: signal 11 sent to /usr/bin/miro.real[miro.real:19177]
> > >> uid/euid:1000/1000 gid/egid:100/100, parent /usr/bin/miro[miro:19176]
> > >> uid/euid:1000/1000 gid/egid:100/100
> > >>
> > >> and since miro.real is a python script:
> > >
> > > in that case you have to use paxctl on the python interpreter, not
> > > the script. but before that it's better to find out why it crashes,
> > > so you should produce a coredump and analyze it.
> > Thank you, I ran 'paxctl -m /usr/bin/python' and now miro starts
> > without softmode enabled. I use the miro ebuild from this bug:
> > http://bugs.gentoo.org/show_bug.cgi?id=131527
> > - Gramt
> Don't know what miro is and didn't bother to look at the bug, but removing
> MPROTECT on python is not good. One alternative might be to write simple
> wrapper in C for miro and paxctl that instead.
> Gordon Malm (gengor)
Miro is a slick little IPTV client written mostly in python. It was previously called democracy player or similar.
Removing MPROTECT on python is simply the wrong thing to do. -- quantumsummers firstname.lastname@example.org email@example.com "...there are no rules here -- we're trying to accomplish something." - Thomas A. Edison