<html> <head> <base href="https://bugs.freedesktop.org/" /> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW --- - Potential crash bug in src/gallium/auxiliary/rtasm/rtasm_execmem.c" href="https://bugs.freedesktop.org/show_bug.cgi?id=73473#c4">Comment # 4</a> on <a class="bz_bug_link bz_status_NEW " title="NEW --- - Potential crash bug in src/gallium/auxiliary/rtasm/rtasm_execmem.c" href="https://bugs.freedesktop.org/show_bug.cgi?id=73473">bug 73473</a> from <a class="email" href="mailto:jaak@ristioja.ee" title="Jaak Ristioja <jaak@ristioja.ee>"> Jaak Ristioja</a> <pre>(In reply to <a href="show_bug.cgi?id=73473#c3">comment #3</a>) > Created <a href="attachment.cgi?id=91834" name="attach_91834" title="gallium/rtasm: add support for SELinux">attachment 91834</a> <a href="attachment.cgi?id=91834&action=edit" title="gallium/rtasm: add support for SELinux">[details]</a> <a href='page.cgi?id=splinter.html&bug=73473&attachment=91834'>[review]</a> [review] > gallium/rtasm: add support for SELinux > > You're absolutely right here. Seems like there aren't many hardened/selinux > users of the gallium drivers. > > The attached patch should do the job, can you give it a try ? I tried the patch on Mesa 5.1.9 under Gentoo. patching file src/gallium/auxiliary/rtasm/rtasm_execmem.c Hunk #1 succeeded at 60 (offset -1 lines). Hunk #2 succeeded at 72 (offset -1 lines). Hunk #3 succeeded at 90 (offset -1 lines). Hunk #4 succeeded at 103 (offset -1 lines). Hunk #5 succeeded at 115 (offset -1 lines). Running headless over SSH I could not verify today that the glxgears were actually shown in X, but here are the results I got: $ DISPLAY=:0.0 glxgears Running synchronized to the vertical refresh. The framerate should be approximately the same as the monitor refresh rate. 29168 frames in 5.0 seconds = 5833.411 FPS 29463 frames in 5.0 seconds = 5892.528 FPS ... This still gives the kernel message of RWX mmap being denied which is normal. $ DISPLAY=:0.0 LIBGL_ALWAYS_SOFTWARE=1 glxgears LLVM ERROR: Allocation failed when allocating new memory in the JIT Can't allocate RWX Memory: Operation not permitted This also gives the kernel message, but exits immediately after with exit status 1.</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the assignee for the bug.</li> </ul> </body> </html>