Bug#503173: grub-common: Segmentation fault in grub-probe when using grsecurity

[Pierre Ynard]

Hello,

I just migrated from grub-legacy to grub-pc, and it is just worse ;)

To allow grub to operate properly, you need to disable non-executable
pages protection and mprotect() restrictions on grub-probe,
grub-mkdevicemap and grub-setup. That is:

paxctl -cms /usr/sbin/grub-probe
paxctl -cms /usr/sbin/grub-mkdevicemap
paxctl -cms /usr/sbin/grub-setup

This is on my i386 system that uses SEGMEXEC; on systems using PAGEEXEC,
you would need to replace the -s flag by -p. Each one of this flags is
necessary to get all the steps working.

I hope this helps.

Regards,

-- 
Pierre Ynard
"Une âme dans un corps, c'est comme un dessin sur une feuille de papier."