retitle 623997 Iceweasel does not work with grsec for kernels > 2.6.32.36
thanks

Hello Mike,
On Mon, Apr 25, 2011 at 05:42:37PM +0200, Helge Kreutzmann wrote:
> On Mon, Apr 25, 2011 at 10:08:13AM +0200, Mike Hommey wrote:
> > https://bugzilla.mozilla.org/show_bug.cgi?id=527356 ?
> 
> Thanks, also for your ultra-fast response!
> 
> Currently I'm up with the »old« (-32.36) kernel, will reboot later and
> see if
> paxctl -r /usr/lib/xulrunner-1.9.1/xulrunner-stub
> will work (I hope this is the right binary) and report back.

Well, I had to run
paxctl -c /usr/lib/xulrunner-1.9.1/xulrunner-stub
first, and now 
remaxp:~# paxctl -v /usr/lib/xulrunner-1.9.1/xulrunner-stub
PaX control v0.5
Copyright 2004,2005,2006,2007 PaX Team <[email protected]>

- PaX flags: -------x-e-r [/usr/lib/xulrunner-1.9.1/xulrunner-stub]
        RANDEXEC is disabled
        EMUTRAMP is disabled
        RANDMMAP is disabled

and voilá, iceweasel starts again.

> Looking at the mozilla bugs this issues seems rather stalled,
> unfortunately. 

Well, having to disable important security measures for applications
which should obtain the most protection is, indeed, rather
unfortunate. Hopefully a fix is found sooner than later.

I'm tempted to tag this issue »security«, but I assume, that you
disagree?

Greetings

           Helge
-- 
      Dr. Helge Kreutzmann                     [email protected]
           Dipl.-Phys.                   http://www.helgefjell.de/debian.php
        64bit GNU powered                     gpg signed mail preferred
           Help keep free software "libre": http://www.ffii.de/

Attachment: signature.asc
Description: Digital signature

Reply via email to