Grsecurity/PAX and gstreamer/ORC

[Kevin Chadwick]

With all the grsecurity kernel patch options enabled, sound via
gstreamer won't work by default in Opera or parole which are two of the
few browsers and media players to run under these default grsecurity
settings. 

16 plugins are blacklisted. 

The error messages on plugin scan are about Selinux mmap restrictions
or home noexec. 

Parole gives the error on playing audio of missing element
'audioconvert' 

If you delete the registry file and then add ORC_CODE=emulate to the
environment, sound for html5 video works fine in Opera and parole plays
audio without error.

/usr/bin/gst-inspect-0.10 -b then gives only 9 blacklisted.

Blacklisted files:
  libgstpostproc.so
  libgstffmpegscale.so
  libgstpulse.so
  libgstdv.so
  libgstffmpeg.so
  libgstxvid.so
  libgstflac.so
  libgstsndfile.so
  libgstwildmidi.so

Is there anything wrong with always using the ORC_CODE=emulate debug
option except a slight performance decrease?


p.s. Is performance of binary registry files preferable over a human
readible format considering disks and memory are so fast?

Thanks, Kevin Chadwick

________________________________________________________

 Why not do something good every day and install BOINC.
________________________________________________________