Bug#609602: grub-probe fails in PAX context
Patrick Winnertz
winnie at debian.org
Mon Jan 10 21:34:48 UTC 2011
Package: grub-common
Version: 1.98+20100804-11
Severity: normal
File: /usr/sbin/grub-probe
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
When running grub-probe on a PAX (grsecurity2) enabled kernel, grub-probe is
killed with this message:
[ 9802.145075] PAX: From 85.197.21.96: execution attempt in: <anonymous mapping>, 7b4c5c1f2000-7b4c5c213000 7ffffffde000
[ 9802.145133] PAX: terminating task: /usr/sbin/grub-probe(grub-probe):5164, uid/euid: 0/0, PC: 00007b4c5c212420, SP: 00007b
4c5c2123c8
[ 9802.145188] PAX: bytes at PC: 41 bb 10 61 40 00 49 ba 10 24 21 5c 4c 7b 00 00 49 ff e3 00
[ 9802.145262] PAX: bytes at SP-8: 0000000000000000 0000000000402bbb 0000000000000000 0000000000631800 00007b4c5c212420 00000000004062a6 00000000175d7201 00007b4c5c212803 0000000000000003 0000000000405f7e 0000000000000000
It would be nice if you could make grub-probe compatible with PAX so that you don't have to overwrite the security flags for this file.
Greetings
Winnie
- -- System Information:
Debian Release: 6.0
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.36+winnie2 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages grub-common depends on:
ii base-files 6.0 Debian base system miscellaneous f
ii dpkg 1.15.8.7 Debian package management system
ii gettext-base 0.18.1.1-3 GNU Internationalization utilities
ii install-info 4.13a.dfsg.1-6 Manage installed documentation in
ii libc6 2.11.2-7 Embedded GNU C Library: Shared lib
ii libdevmapper1.02.1 2:1.02.48-4 The Linux Kernel Device Mapper use
ii libfreetype6 2.4.2-2.1 FreeType 2 font engine, shared lib
ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime
Versions of packages grub-common recommends:
ii os-prober 1.42 utility to detect other OSes on a
Versions of packages grub-common suggests:
pn grub-emu <none> (no description available)
pn multiboot-doc <none> (no description available)
pn xorriso <none> (no description available)
- -- no debconf information
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAk0re28ACgkQzgm26bkTFDpI2ACfXnhaUcqs3Rl8Tz3EsryFawSL
vSwAn3hg/7QMOu+tBdESx0EAcZlqSJPD
=Vo/j
-----END PGP SIGNATURE-----
More information about the Pkg-grub-devel
mailing list