Bug#605090: linux-grsec testing

2015-12-20 Thread bancfc
On 2015-12-20 09:51, Yves-Alexis Perez wrote: On dim., 2015-12-20 at 00:32 +, ban...@openmailbox.org wrote: Hi. After testing the kernel X doesn't boot because restrict mprotect is  enabled. Hi, it's most likely because you're using nvidia/nouveau or amd/radeon graphic card, and the us

Bug#605090: linux-grsec testing

2015-12-20 Thread Yves-Alexis Perez
On dim., 2015-12-20 at 19:28 +, ban...@openmailbox.org wrote: > Agreed but there are many major software packages especially on the  > desktop that need exceptions to work for example Iceweasel and by  > extension Tor Browser. Sure. I'm just not interested in maintaining that list myself. > >

Bug#605090: linux-grsec testing

2015-12-20 Thread Yves-Alexis Perez
On dim., 2015-12-20 at 00:32 +, ban...@openmailbox.org wrote: > Hi. After testing the kernel X doesn't boot because restrict mprotect is  > enabled. Hi, it's most likely because you're using nvidia/nouveau or amd/radeon graphic card, and the userland driver uses LLVMpipe which in turns uses

Bug#605090: linux-grsec testing

2015-12-19 Thread bancfc
Hi. After testing the kernel X doesn't boot because restrict mprotect is enabled. Are there plans to integrate a PaX exception list so mprotect can be enabled system wide while common software can still work?