[FreeNX-kNX] freenx and pax enabled ("hardened") kernel?

Alexander Skwar listen at alexander.skwar.name
Sat Apr 15 10:42:33 UTC 2006


Hello!

I think, I now found the reason why I'm unable to use freenx. I
set SESSION_LOG_CLEAN=0 in node.conf and in the "session" file
I find:

askwar at hetzner ~/.nx $ cat C-hetzner-1000-209E6A6AD5C4CA0CE4D5B3239B5FA3C5/session
/usr/NX/bin/nxagent: error while loading shared libraries: /usr/NX/lib/libXcompext.so.1: cannot make segment writable for relocation: Permission denied
qvwm: Can't open display unix:1000

Well, according to <http://www.gentoo.org/proj/en/hardened/hardenedfaq.xml#paxnoelf>,
that's because I set in kernel .config: " [*]   Disallow ELF text relocations".
This can be switched off using the "chpax" utility by doing
"chpax -m $bin", but for some reason, when I did this against
nxagent and libXcompext.so.1.5.0, I still cannot login to
nx.

Does anyone know how to fix this?

Alexander Skwar
-- 
Too much of everything is just enough.
		-- Bob Wier



More information about the FreeNX-kNX mailing list