[grsec] pax question

Igor Gueths igueths at lava-net.com
Wed Jun 1 13:53:50 EDT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi all. In seeing to see if Pax is working properly on my system, I ran 
paxtest which is a little program that comes with Gentoo which I managed 
to compile. It showed that Pax was killing stack overflows and certain 
other things ok. However, when I go to check what flags are on diffirent 
binaries for example /usr/local/apache2/bin/httpd, I get the copyright 
message and no listing. In my kernel, relating to the marking options I 
nave:
CONFIG_PAX_PT_PAX_FLAGS=y

Do I need to enable legacy header marking for those binaries that 
weren't built with the new Binutils (I patched it with the Pax patch and 
rebuilt). Or is something wrong? Thanks!
- -- 
How many chunks could checkchunk check if checkchunck could check chunks?
- -- Alan Cox
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iQIVAwUBQp32Lqe2pgKIdGq4AQr5jQ/+L8OQAPkF+DoFe2APu9atpCm6sv/GMZuW
B+upzWTIS8m6K/lrIvIeZoj1+GPrTB74mkw2usCuS3u6dp04l7/oE0D9fiyPADgc
KKJ5ALy8qpTCGd5gQXW6oiOQggXRp7Jy6YTxzC1hbGL71rWIgExIgJuipx4pVBGJ
lqqGJFG812rl3Mu8BhTcfaKXaHqB6iFBSZnl8RdBwW7cEU8PYSltLmLPMtCZLrUI
xxOhYy/O9tTkkrLP/tn8snfNvCh6atQW7dyCZOuOfXYoGRy90Rkia+Yj4FcEOH4e
0zUxC1BQehtUlHu/9UklQiGnKsDtntxO3gRznvuBWSZFgMMMCrObXucKUa7/huMq
daXU3d7xAb7yNedN37PNKsXqpn1ixjvApZCmvvpqIQLXJ+S6P3FpqQtAmxq5aqfH
urUSmv7dkgLbTMGnPG9FMc/rnoJj/wdH/PQfO7LCaSxeN/W3d+vOA8A9cGPKyJJ/
M0ccySeRH4O5bGo61tgiAfiAJoPVD5GLtvfJaxzEZaj2RCzXX4cZEFvWGSZA+mI6
BFq1SzHEUv7LbWSDvSDmS1hKzCPD++kOB/BYqYAIsx/c3I0omYOn+HFqfE37hP36
DqTJuuCPr5E5PP67XV4ovwJjvD2YC/+4HX8rlpMPf4P1XQKy0WCBdH727SylO6tr
fWqd5G/voFc=
=WRX9
-----END PGP SIGNATURE-----


More information about the grsecurity mailing list