Gentoo Archives: gentoo-hardened

From:	Gordon Malm <gengor@g.o>
To:	gentoo-hardened@l.g.o
Subject:	Re: [gentoo-hardened] Grsecurity slows down a web server?
Date:	Fri, 23 Jan 2009 20:06:34
Message-Id:	`200901231206.30400.gengor@gentoo.org`
In Reply to:	Re: [gentoo-hardened] Grsecurity slows down a web server? by Grant

1	On Friday, January 23, 2009 11:05:00 Grant wrote:
2	> > Try 'pspax'. If there is no NX bit and you enable both PAGEEXEC and
3	> > SEGMEXEC it should not be using PAGEEXEC.
4	>
5	> What should I be looking for from pspax? I have to admit it does seem
6	> faster now that I've disabled PAGEEXEC.
7	>
8	> - Grant
9	>
10
11	Using PAGEEXEC:
12
13	user 18815 PeMRs w^x ET_DYN ftp =
14
15	Using SEGMEXEC:
16
17	user 18821 peMRS w^x ET_DYN ftp =
18
19	The Hardened Gentoo Server security level also enables PAX_MEMORY_SANITIZE
20	which is good for another 3% or so performance drop.
21
22	Gordon Malm (gengor)