From: Andreas K. <ako...@we...> - 2005-10-01 06:51:24
|
Jost Boekemeier wrote: >>2.4.31 and grsecurity patch. OK, grsec/PAX was the problem. I found a lot of PAX and grsec messages in my syslog, e.g.: Sep 30 21:19:23 rainbow PAX: From xxx.xxx.xxx.xxx: execution attempt in: /opt/ibm-jdk-bin-1.4.2/jre/bin/libjitc.so, 27f2d000-27f3c000 0024e000 Sep 30 21:19:23 rainbow PAX: terminating task: /opt/ibm-jdk-bin-1.4.2/bin/javac(javac):13640, uid/euid: 1000/1000, PC: 27f3a0d0, SP: 5ffa9ccc Sep 30 21:19:23 rainbow grsec: From xxx.xxx.xxx.xxx: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /opt/ibm-jdk-bin-1.4.2/bin/javac[javac:13640] uid/euid:1000/1000 gid/egid:407/407, parent /bin/bash[bash:13217] uid/euid:1000/1000 gid/egid:407/407 That's where I found the solution: http://www.gentoo.org/proj/en/hardened/hardenedfaq.xml#paxjava chpax -pemrxs /opt/*-jdk-*/{jre,}/bin/* So it works now. I'm using ibm-jdk for now. Should php-java-bridge work with PHP 5.1 (RC1)? It seems to work, or are there any known/expected problems? best regards and thanks a lot! Andreas |