Bug#609602: grub-probe fails in PAX context

Patrick Winnertz winnie at debian.org
Mon Jan 10 21:34:48 UTC 2011


Package: grub-common
Version: 1.98+20100804-11
Severity: normal
File: /usr/sbin/grub-probe

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

When running grub-probe on a PAX (grsecurity2) enabled kernel, grub-probe is 
killed with this message:

[ 9802.145075] PAX: From 85.197.21.96: execution attempt in: <anonymous mapping>, 7b4c5c1f2000-7b4c5c213000 7ffffffde000
[ 9802.145133] PAX: terminating task: /usr/sbin/grub-probe(grub-probe):5164, uid/euid: 0/0, PC: 00007b4c5c212420, SP: 00007b
4c5c2123c8
[ 9802.145188] PAX: bytes at PC: 41 bb 10 61 40 00 49 ba 10 24 21 5c 4c 7b 00 00 49 ff e3 00 
[ 9802.145262] PAX: bytes at SP-8: 0000000000000000 0000000000402bbb 0000000000000000 0000000000631800 00007b4c5c212420 00000000004062a6 00000000175d7201 00007b4c5c212803 0000000000000003 0000000000405f7e 0000000000000000

It would be nice if you could make grub-probe compatible with PAX so that you don't have to overwrite the security flags for this file.

Greetings
Winnie

- -- System Information:
Debian Release: 6.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.36+winnie2 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages grub-common depends on:
ii  base-files              6.0              Debian base system miscellaneous f
ii  dpkg                    1.15.8.7         Debian package management system
ii  gettext-base            0.18.1.1-3       GNU Internationalization utilities
ii  install-info            4.13a.dfsg.1-6   Manage installed documentation in 
ii  libc6                   2.11.2-7         Embedded GNU C Library: Shared lib
ii  libdevmapper1.02.1      2:1.02.48-4      The Linux Kernel Device Mapper use
ii  libfreetype6            2.4.2-2.1        FreeType 2 font engine, shared lib
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

Versions of packages grub-common recommends:
ii  os-prober                     1.42       utility to detect other OSes on a 

Versions of packages grub-common suggests:
pn  grub-emu                      <none>     (no description available)
pn  multiboot-doc                 <none>     (no description available)
pn  xorriso                       <none>     (no description available)

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAk0re28ACgkQzgm26bkTFDpI2ACfXnhaUcqs3Rl8Tz3EsryFawSL
vSwAn3hg/7QMOu+tBdESx0EAcZlqSJPD
=Vo/j
-----END PGP SIGNATURE-----





More information about the Pkg-grub-devel mailing list