[grsec] Nvidia libGL.so Problem

[sqmishra at o2.ie]

Hello,

I'm running Gentoo/Xorg-6.7 with a PAX/GRSEC enabled kernel. I have an Nvidia video card. I'm getting the following kernel message(s) when I try and run any GL based applications.


Sep  6 18:21:18 amoeba PAX: execution attempt in: /usr/lib/opengl/nvidia/lib/libGL.so.1.0.6111, 2574c000-2575b000 00058000
Sep  6 18:21:18 amoeba PAX: terminating task: /usr/X11R6/bin/glxinfo(glxinfo):7661, uid/euid: 9999/9999, PC: 25755afc, SP: 5bc95e2c
Sep  6 18:21:18 amoeba PAX: bytes at PC: 65 a1 c8 ff ff ff ff a0 18 04 00 00 cc cc cc cc cc cc cc cc
Sep  6 18:21:18 amoeba PAX: bytes at SP: 25daa80a 00000000 00000000 00000064 00000064 080662c8 0808ad58 269fc040 080ad400 080ad400 080ad430 080ad430 0000002c 0000002c 25974540 25974188 00000000 00000000 00000000 00008c09
Sep  6 18:21:18 amoeba grsec: attempted resource overstep by requesting 4096 forRLIMIT_CORE against limit 0 by /usr/X11R6/bin/glxinfo[glxinfo:7661] uid/euid:9999/9999 gid/egid:100/100, parent /bin/bash[bash:4711] uid/euid:9999/9999 gid/egid:100/100

Sep  6 18:21:22 amoeba PAX: execution attempt in: /usr/lib/opengl/nvidia/lib/libGL.so.1.0.6111, 21338000-21347000 00058000
Sep  6 18:21:22 amoeba PAX: terminating task: /usr/X11R6/bin/glxgears(glxgears):816, uid/euid: 9999/9999, PC: 21341afc, SP: 5d767ccc
Sep  6 18:21:22 amoeba PAX: bytes at PC: 65 a1 c8 ff ff ff ff a0 18 04 00 00 cc cc cc cc cc cc cc cc
Sep  6 18:21:22 amoeba PAX: bytes at SP: 2183e80a 00000000 00000000 0000012c 0000012c 08071d18 08096740 2248f040 080b8e10 080b8e10 080b8e40 080b8e40 00000021 00000021 21560540 21560188 00000000 00000000 00000000 000091f9
Sep  6 18:21:22 amoeba grsec: attempted resource overstep by requesting 4096 forRLIMIT_CORE against limit 0 by /usr/X11R6/bin/glxgears[glxgears:816] uid/euid:9999/9999 gid/egid:100/100, parent /bin/bash[bash:4711] uid/euid:9999/9999 gid/egid:100/100

I get something similar with all GL based applications.

I know it doesn't make much sense to be using grsec with a desktop machine, but hoping someone could help me out with this.

Thanks.
Samir.


-------------------------------------------------------