[grsec] pax question
Igor Gueths
igueths at lava-net.com
Wed Jun 1 13:53:50 EDT 2005
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Hi all. In seeing to see if Pax is working properly on my system, I ran
paxtest which is a little program that comes with Gentoo which I managed
to compile. It showed that Pax was killing stack overflows and certain
other things ok. However, when I go to check what flags are on diffirent
binaries for example /usr/local/apache2/bin/httpd, I get the copyright
message and no listing. In my kernel, relating to the marking options I
nave:
CONFIG_PAX_PT_PAX_FLAGS=y
Do I need to enable legacy header marking for those binaries that
weren't built with the new Binutils (I patched it with the Pax patch and
rebuilt). Or is something wrong? Thanks!
- --
How many chunks could checkchunk check if checkchunck could check chunks?
- -- Alan Cox
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)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=WRX9
-----END PGP SIGNATURE-----
More information about the grsecurity
mailing list