Bug#623997: Iceweasel does not show any output under certain kernels

[Mike Hommey]

On Mon, Apr 25, 2011 at 10:07:30PM +0200, Helge Kreutzmann wrote:
> retitle 623997 Iceweasel does not work with grsec for kernels > 2.6.32.36
> thanks
> 
> Hello Mike,
> On Mon, Apr 25, 2011 at 05:42:37PM +0200, Helge Kreutzmann wrote:
> > On Mon, Apr 25, 2011 at 10:08:13AM +0200, Mike Hommey wrote:
> > > https://bugzilla.mozilla.org/show_bug.cgi?id=527356 ?
> > 
> > Thanks, also for your ultra-fast response!
> > 
> > Currently I'm up with the »old« (-32.36) kernel, will reboot later and
> > see if
> > paxctl -r /usr/lib/xulrunner-1.9.1/xulrunner-stub
> > will work (I hope this is the right binary) and report back.
> 
> Well, I had to run
> paxctl -c /usr/lib/xulrunner-1.9.1/xulrunner-stub
> first, and now 
> remaxp:~# paxctl -v /usr/lib/xulrunner-1.9.1/xulrunner-stub
> PaX control v0.5
> Copyright 2004,2005,2006,2007 PaX Team <pageexec at freemail.hu>
> 
> - PaX flags: -------x-e-r [/usr/lib/xulrunner-1.9.1/xulrunner-stub]
>         RANDEXEC is disabled
>         EMUTRAMP is disabled
>         RANDMMAP is disabled
> 
> and voilá, iceweasel starts again.
> 
> > Looking at the mozilla bugs this issues seems rather stalled,
> > unfortunately. 
> 
> Well, having to disable important security measures for applications
> which should obtain the most protection is, indeed, rather
> unfortunate. Hopefully a fix is found sooner than later.
> 
> I'm tempted to tag this issue »security«, but I assume, that you
> disagree?

I think there's already an existing bug, though.

Mike