W^X violation issue

[anthonyc]

Hi,

I have some message in dmesg related to W^X violation for some processes.
Theses processes are installed in /usr/local in a have separate partition with wxallowed option.

> dmesg
java(28347): mprotect W^X violation
java(95393): mprotect W^X violation
node(15100): mmap W^X violation
java(77900): mprotect W^X violation
php-fpm-7.0(95855): mmap W^X violation
php-fpm-7.0(40758): mmap W^X violation

> mount
/dev/sd0a on / type ffs (local, wxallowed)
/dev/sd1d on /usr/local type ffs (local, nodev, wxallowed)

What's wrong ?

Thanks.

[jggimi]

Welcome!

Are you running 6.0-release or did you install -current (a snapshot)? In -current, permitting W^X violations require two steps, while in -release, only one.

1. The wxallowed mount option must be used on the filesystem storing the binary, as with 6.0-release.
2. The binaries must also be link-edited with the wxneeded flag.

This revision is discussed in the Following -current FAQ.

[anthonyc]

Thanks,

I am running OpenBSD from install60.iso and nothing else, i don't know if is current or release ?

> dmesg |head -1
OpenBSD 6.0 (GENERIC.MP) #2: Mon Oct 17 10:22:47 CEST 2016

[jggimi]

From the minimal information you've posted, that appears to be your own build of a -release kernel, so I assume you are using -release plus one or more published errata patches applied to the kernel.

Are your java applications working, or are they halting and producing *.core files? If they are working, the violations are only being logged as warnings.

If the applications are failing, then we must investigate more thoroughly to determine the root cause.

---

There are three Flavors of OpenBSD. -release, -stable, and -current. -release is published twice a year and never changes, -stable is the published errata patches and may also include additional minor patches, while -current is the development branch. More information may be found in the OpenBSD FAQ section on Flavors.

[anthonyc]

You right, i am running last kernel from mtier:

 
> dmesg |head -2
OpenBSD 6.0 (GENERIC.MP) #2: Mon Oct 17 10:22:47 CEST 2016
root@stable-60-amd64.mtier.org:/binpatchng/work-binpatch60-amd64/src/sys/arch/amd64/compile/GENERIC.MP

I cannot see core file and processes are still running with same PID, so is only warning messages and i can ignore it ?

Thanks

[jggimi]

Yes, these are warnings. If you run any of these executables from a filesystem without the wxallowed option, you will see application failures and the creation of .core dump files.