[issue11912] Python shouldn't use the mprotect() system call

2011-04-29 Thread Terry J. Reedy
Terry J. Reedy tjre...@udel.edu added the comment: Is there any reason not to close this as a CPython issue? -- nosy: +terry.reedy ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11912 ___

[issue11912] Python shouldn't use the mprotect() system call

2011-04-25 Thread Nils Breunese
Nils Breunese n...@breun.nl added the comment: I contacted the author of iotop and he told me iotop does not use mprotect (but it does use dlopen). Guess I'll have to do some more digging to find what is exactly doing the call to mprotect. -- ___

[issue11912] Python shouldn't use the mprotect() system call

2011-04-24 Thread Charles-Francois Natali
Charles-Francois Natali neolo...@free.fr added the comment: PaX doesn't block mprotect in itself, but prevents pages from being both writable and executable. Andreas's right, it's probably due to a dlopen of an object requiring executable stack via ctypes. So you should report this to iotop's

[issue11912] Python shouldn't use the mprotect() system call

2011-04-24 Thread Jesús Cea Avión
Changes by Jesús Cea Avión j...@jcea.es: -- nosy: +jcea ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11912 ___ ___ Python-bugs-list mailing list

[issue11912] Python shouldn't use the mprotect() system call

2011-04-23 Thread Nils Breunese
New submission from Nils Breunese n...@breun.nl: When I try to run iotop [0] on CentOS 5.6 on a kernel with grsecurity [1] then iotop won't start because grsecurity is blocking Python because of its use of the mprotect() system call. Please see

[issue11912] Python shouldn't use the mprotect() system call

2011-04-23 Thread Antoine Pitrou
Antoine Pitrou pit...@free.fr added the comment: Where have you seen that Python is calling mprotect()? There's no sign of it in the whole source tree. -- nosy: +neologix, pitrou ___ Python tracker rep...@bugs.python.org

[issue11912] Python shouldn't use the mprotect() system call

2011-04-23 Thread Nils Breunese
Nils Breunese n...@breun.nl added the comment: I got this error message in /var/log/messages when trying to start iotop: Apr 13 08:49:37 hostname kernel: grsec: From xxx.xxx.xxx.xxx: denied RWX mprotect of /lib64/ld-2.5.so by /usr/bin/iotop[iotop:9836] uid/euid:0/0 gid/egid:0/0, parent

[issue11912] Python shouldn't use the mprotect() system call

2011-04-23 Thread Antoine Pitrou
Antoine Pitrou pit...@free.fr added the comment: /usr/bin/iotop is a Python script and according to that log message grsecurity detected a call to mprotect(). Well, does Python itself run ok? That Python script could use third-party extension modules which issue the offending mprotect() call.

[issue11912] Python shouldn't use the mprotect() system call

2011-04-23 Thread Nils Breunese
Nils Breunese n...@breun.nl added the comment: I haven't had any problems with other Python applications like this, Python seems fine otherwise. I just noticed that iotop has a dependency on python-ctypes, which sounds like it could be iotop doing the mprotect() calls via ctypes. Does that

[issue11912] Python shouldn't use the mprotect() system call

2011-04-23 Thread Andreas Stührk
Andreas Stührk andy-pyt...@hammerhartes.de added the comment: glibc's `dlopen()` can call `mprotect()`, which is used for loading C extensions. -- nosy: +Trundle ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue11912