[grsec] consider splitting grsecurity
spender at grsecurity.net
spender at grsecurity.net
Sun Nov 7 18:46:27 EST 2004
> well, then check your diffs, because you have much left out from current
> pax. That's why I say, split it. PaX is maintained separately. There is
> almost no conflict between PaX and the rest of grsec, only where you
> decided to not account from VM_MIRROR (and that haven't changed much in
> the last time), so that conflict can be easily adapted (not considering
> the changes you have done not using asm/page.h and similar, changed to
> use grsecurity/Config.in instead of what was provided by
> PaX, but that does not change any functionality), and it's more accurate,
> consider only the fact that some time ago some PaX option that was
> allowed only on 586_TSC was possible on grsec w/o this condition,
> producing some noise/failures.
I've gone through an entire check of the differences between grsec and
PaX and copied over the changes (page.h, fixed pageexec config, amd64,
mips, mips64, ia64 support).
-Brad
More information about the grsecurity
mailing list