[grsec] paxctl does not work, why?

Horváth Ákos maxx at covysoft.net
Mon Aug 16 08:53:30 EDT 2004


paxctl does not anything on my system. I am using currently the latest stable 
pax tools (v0.2), on a debian sarge with a vanilla 2.6.7 patched by 
grsecurity. The symptom is the next:

(/sbin/init- is an exact copy of the /sbin/init binary).

# paxctl -p -E -m -R -x -S /sbin/init-
[root at maxx:~:14:50:13:519]
# paxctl -v /sbin/init-
PaX control v0.2
Copyright 2004 PaX Team <pageexec at freemail.hu>

[root at maxx:~:14:50:19:520]
# paxctl -P -e -M -r -X -s /sbin/init-
[root at maxx:~:14:50:29:521]
# paxctl -v /sbin/init-
PaX control v0.2
Copyright 2004 PaX Team <pageexec at freemail.hu>

[root at maxx:~:14:50:31:522]
#

If I do a strace of paxctl, the it seems paxctl mmap()-s in the binary 
correctly:

# strace paxctl -P -e -M -r -X -s /sbin/init-
execve("/sbin/paxctl", ["paxctl", "-P", "-e", "-M", "-r", "-X", "-s", 
"/sbin/init-"], [/* 34 vars */]) = 0
uname({sys="Linux", node="maxx", ...})  = 0
[...]
munmap(0x40018000, 73745)               = 0
open("/sbin/init-", O_RDONLY)           = 3
mmap2(NULL, 64, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40018000
close(3)                                = 0
munmap(0x40018000, 64)                  = 0
open("/sbin/init-", O_RDWR)             = 3
mmap2(NULL, 276, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x40018000
close(3)                                = 0
exit_group(0)                           = ?
[root at maxx:~:14:51:45:523]
#

What could be the problem?

thank all

MaXX


More information about the grsecurity mailing list