Arch Linux

Divinorum

Member

Registered: 2011-08-16

Posts: 44

[SOLVED]linux-grsec breaks polkitd

Since linux-grsec-3.15.8 (released in August) polkitd fails to start. This in turn causes network-manager to fail as well. This occurs with the recent linux-grsec-3.16.5 package as well. I am running the current 0.122-2 version of polkit.

A fix to a smiliar problem is described in this post. I turned off all pax-flags for /usr/lib/polkit-1/polkitd and this does not fix my problem.

The bugtracker at Gentoo mentions solutions to the polkitd / linux-grsec issue here:
bug 455938
bug 472098

The stated workaround is to add polkitd to the group specified in CONFIG_GRKERNSEC_PROC_GID in /proc/config.gz. For me CONFIG_GRKERNSEC_PROC_GID is not listed in /proc/config.gz. The only readout in dmesg regarding polkitd after upgrading linux-grsec beyond the 3.15.5 version (the last one to work for me) is this:

[   28.224975] traps: polkitd[921] trap int3 ip:336ee05dd00 sp:3df0701c5c0 error:0

I am unsure about how to proceed and could use some help. Thanks.

------
Solution: Download paxd to manage pax-flags for applications like polkit so that they can start with linux-grsec.

Last edited by Divinorum (2014-10-13 11:46:52)

Scimmia

Fellow

Registered: 2012-09-01

Posts: 13,729

Re: [SOLVED]linux-grsec breaks polkitd

A bug report against linux-grsec would probably be the best place to start (if one doesn't already exist)

Divinorum

Member

Registered: 2011-08-16

Posts: 44

Re: [SOLVED]linux-grsec breaks polkitd

With the abundance of bugs already reported with polkit / grsec I assumed users found a workaround since this issue has persited for months at least. The fix may not exist but I was hoping to find more information about a workaround beyond what I have already attempted. Nevertheless I will follow your advice and issue a fresh bug report.