grsecurity forums

Hello,

I'm using Arch Linux x86_64, with

kile 2.1.3-7
linux-grsec 1:4.9.13.r201702270729-1
paxd 32-1

kile doesn't start neither calling /usr/bin/kile nor opening a file. In the journal it says:

Code: Select all

grsec: denied RWX mmap of <anonymous mapping> by /usr/bin/kile[kile:10130] uid/euid:1000/1000 gid/egid:1000/1000, parent /usr/bin/zsh[zsh:9925] uid/euid:1000/1000

The problem can be solved appending the following line to /etc/paxd, though I don't know if these are the permissions it should be using.

Code: Select all

em /usr/bin/kile

Is this wrong? Should it be in the exceptions list or should I submit a bug report to the kile people?

you would have to look at the code of kile (and/or its dependencies) to figure out why it wants an RWX map. it can be either a mere oversight (asking for more rights than needed) or it may actually do runtime code generation (in a not-exactly-secure way). your PaX flags are fine for getting it to work for now.