Re: [gentoo-hardened] Grsecurity slows down a web server?

[Grant]

>> > There is no "nx" in your cpuinfo flags. Therefore, your P4 does not
>> > have the hardware NX bit (or XD bit in Intel wording)
>>
>> I do have SEGMEXEC enabled though.  Should it still be noticeably (but
>> slightly) slower?  If so, I suppose the best thing to do would be to
>> upgrade the CPU?
>
> if both PAGEEXEC and SEGMEXEC are enabled, PaX uses one of them by default,
> depending on whether your CPU and kernel config supports the NX bit or not
> (yes, you need to enable PAE support in the kernel in order to actually be
> able to use the NX bit). in your case the CPU has no NX support so PaX should
> have fallen back to SEGMEXEC (pspax could confirm it) and not PAGEEXEC. can
> you check what really happened? because if PAGEEXEC was chosen by default on
> your CPU, there's a bug somewhere...

Nope, you guys are absolutely right.  It falls back to peMRS whether
or not I enable PAGEEXEC since I don't have the nx flag.

- Grant