Talk:Grsecurity

From ArchWiki
Jump to: navigation, search

config_debug_fs

About the recent compat change: powertop will still bail out with "Failed to mount debugfs!". Looking at /proc/config.gz there is no CONFIG_DEBUG_FS option at all. Any pointer why it is not present? --Indigo (talk) 11:50, 26 June 2016 (UTC)

GRKERNSEC_KMEM disables DEBUG_FS, but that's unrelated to the compatibility issue that was removed. -- thestinger 15:26, 26 June 2016 (UTC)
Ok, thanks. --Indigo (talk) 22:58, 29 June 2016 (UTC)

Qt 5.8 (QML Disk Cache) and GRSec

For the information of GRSec users using TPE and recently having difficulties with e.g. KDE or SDDM (i.e. crashes with things like this appearing in the journal):

grsec: denied untrusted exec (due to not being in trusted group and file in non-root-owned directory) of /var/lib/sddm/.cache/sddm-greeter/qmlcache/[hashed_name].qmlc by [et cetera]

This thread on BBS may be of interest: (#222486) sddm-helper crashes.

-- aexoxea (talk) 10:20, 30 January 2017 (UTC)

Workaround has been promulgated on the forums; now added on this article under the TPE Compatibility heading.
-- aexoxea (talk) 09:16, 31 January 2017 (UTC)