| Main Archive Page > Month Archives > gentoo-hardened archives |
Re: [gentoo-hardened] miro segfaults when PAX is not in softmode
From: Matthew Summers <msummers42_at_nospam>Date: Sun Apr 05 2009 - 19:23:15 GMT
To: gentoo-hardened@lists.gentoo.org
On Sun, Apr 5, 2009 at 1:42 PM, Gordon Malm <gengor@gentoo.org> wrote:
> On Sunday, April 5, 2009 08:54:22 Grant wrote:
> > >> I use a program called miro a lot, but since upgrading to gcc-4.3.3,
> > >> it segfaults if I don't issue:
> > >
> > > what's the package name? or what ebuild do you use?
> > >
> > >> grsec: signal 11 sent to /usr/bin/miro.real[miro.real:19177]
> > >> uid/euid:1000/1000 gid/egid:100/100, parent /usr/bin/miro[miro:19176]
> > >> uid/euid:1000/1000 gid/egid:100/100
> > >>
> > >> and since miro.real is a python script:
> > >
> > > in that case you have to use paxctl on the python interpreter, not
> > > the script. but before that it's better to find out why it crashes,
> > > so you should produce a coredump and analyze it.
> >
> > Thank you, I ran 'paxctl -m /usr/bin/python' and now miro starts
> > without softmode enabled. I use the miro ebuild from this bug:
> >
> > http://bugs.gentoo.org/show_bug.cgi?id=131527
> >
> > - Gramt
>
> Don't know what miro is and didn't bother to look at the bug, but removing
> MPROTECT on python is not good. One alternative might be to write simple
> wrapper in C for miro and paxctl that instead.
>
> Gordon Malm (gengor)
>
>
Miro is a slick little IPTV client written mostly in python. It was
previously called democracy player or similar.
Removing MPROTECT on python is simply the wrong thing to do. -- quantumsummers quantumsummers@gentoo.org msummers42@gmail.com "...there are no rules here -- we're trying to accomplish something." - Thomas A. Edison