[grsec] grsecurity & lguest

pageexec at freemail.hu pageexec at freemail.hu
Wed Dec 22 18:20:28 EST 2010


On 4 Nov 2010 at 20:11, Philip Sanderson wrote:

just a heads up, the latest PaX patch should work with lguest under KERNEXEC
thanks to andrewg's work (if the code doesn't compile it's all my fault, i didn't
test my cleaned up version ;). the solution is not ideal in that lguest's flat
ring-0 segments are kept as is and that's obviously not good for KERNEXEC, but
i'll let you guys refine this further.

> I can't even get KERNEXEC working on a real machine either (model name    :
> Intel(R) Atom(TM) CPU N270   @ 1.60GHz) :/

what's the issue there? does that CPU have an NX bit? is it enabled? what happens
when you boot a PAE/PaX kernel? does vanilla/PAE work?



More information about the grsecurity mailing list