Terry J. Reedy tjre...@udel.edu added the comment:
Is there any reason not to close this as a CPython issue?
--
nosy: +terry.reedy
___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue11912
___
Nils Breunese n...@breun.nl added the comment:
I contacted the author of iotop and he told me iotop does not use mprotect (but
it does use dlopen).
Guess I'll have to do some more digging to find what is exactly doing the call
to mprotect.
--
___
Charles-Francois Natali neolo...@free.fr added the comment:
PaX doesn't block mprotect in itself, but prevents pages from being both
writable and executable.
Andreas's right, it's probably due to a dlopen of an object requiring
executable stack via ctypes.
So you should report this to iotop's
Changes by Jesús Cea Avión j...@jcea.es:
--
nosy: +jcea
___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue11912
___
___
Python-bugs-list mailing list
New submission from Nils Breunese n...@breun.nl:
When I try to run iotop [0] on CentOS 5.6 on a kernel with grsecurity [1] then
iotop won't start because grsecurity is blocking Python because of its use of
the mprotect() system call.
Please see
Antoine Pitrou pit...@free.fr added the comment:
Where have you seen that Python is calling mprotect()? There's no sign of it in
the whole source tree.
--
nosy: +neologix, pitrou
___
Python tracker rep...@bugs.python.org
Nils Breunese n...@breun.nl added the comment:
I got this error message in /var/log/messages when trying to start iotop:
Apr 13 08:49:37 hostname kernel: grsec: From xxx.xxx.xxx.xxx: denied RWX
mprotect of /lib64/ld-2.5.so by /usr/bin/iotop[iotop:9836] uid/euid:0/0
gid/egid:0/0, parent
Antoine Pitrou pit...@free.fr added the comment:
/usr/bin/iotop is a Python script and according to that log message
grsecurity detected a call to mprotect().
Well, does Python itself run ok? That Python script could use
third-party extension modules which issue the offending mprotect() call.
Nils Breunese n...@breun.nl added the comment:
I haven't had any problems with other Python applications like this, Python
seems fine otherwise.
I just noticed that iotop has a dependency on python-ctypes, which sounds like
it could be iotop doing the mprotect() calls via ctypes. Does that
Andreas Stührk andy-pyt...@hammerhartes.de added the comment:
glibc's `dlopen()` can call `mprotect()`, which is used for loading C
extensions.
--
nosy: +Trundle
___
Python tracker rep...@bugs.python.org
http://bugs.python.org/issue11912
10 matches
Mail list logo