[grsec] pax and kaspersky kavscanner
Igmar Palsenberg
maillist at jdimedia.nl
Tue Mar 8 03:40:09 EST 2005
> 1. you can use the RBAC system to turn off pax flags without having
> to touch the executable (paxctl works only if the target has a
> PT_PAX_FLAGS program header, and even then it'd mean changing the
> file)
>
> 2. you can tell kaspersky labs to stop this silly self-encryption/check
> thing, it doesn't do anything useful.
3. Tell Kaspersky labs to stop abusing mmap() and such.
I've filed numerous bugreports about this issue, and their official
response : 'our product isn't compatible with your kernel, we only support
vanilla kernels'.
But then, looking at their example code, I doubt they will ever understand
:(
Igmar
More information about the grsecurity
mailing list