[grsec] recent kernel features and pax

pageexec at freemail.hu pageexec at freemail.hu
Thu Jul 3 17:26:59 EDT 2008


On 3 Jul 2008 at 16:18, Brian Kroth wrote:

> Exec-shield is a Red Hat that was started in 2003 by Red Hat to
> implement several security protections and is mainly used in Red Hat and
> Fedora. Many features have already been merged lot of time ago, but not
> all of them. In 2.6.25 two of them are being merged: brk() randomization
> and PIE executable randomization. Those two features should make the
> address space randomization on i386 and x86_64 complete."
> 
> I was just wondering if/how this affects similar PAX features?

they don't, the PaX logic stays the same it has for the past 7 years.



More information about the grsecurity mailing list