[grsec] pax and kaspersky kavscanner

Igmar Palsenberg maillist at jdimedia.nl
Tue Mar 8 03:40:09 EST 2005


> 1. you can use the RBAC system to turn off pax flags without having
>    to touch the executable (paxctl works only if the target has a
>    PT_PAX_FLAGS program header, and even then it'd mean changing the
>    file)
> 
> 2. you can tell kaspersky labs to stop this silly self-encryption/check
>    thing, it doesn't do anything useful.

3. Tell Kaspersky labs to stop abusing mmap() and such.

I've filed numerous bugreports about this issue, and their official 
response : 'our product isn't compatible with your kernel, we only support 
vanilla kernels'. 

But then, looking at their example code, I doubt they will ever understand 
:(



	Igmar


More information about the grsecurity mailing list