Re: [gentoo-hardened] Grsecurity slows down a web server?

[Gordon Malm]

No it doesn't.

On Friday, January 23, 2009 11:18:11 Javier J. Martínez Cabezón wrote:
> PaX ignores nx bit in ia32.
>
> 2009/1/23 Grant <emailgrant@×××××.com>:
> >> Try 'pspax'.  If there is no NX bit and you enable both PAGEEXEC and
> >> SEGMEXEC it should not be using PAGEEXEC.
> >
> > What should I be looking for from pspax?  I have to admit it does seem
> > faster now that I've disabled PAGEEXEC.
> >
> > - Grant
> >
> >> http://www.bumpin.org/pics/PaX/pax_performance-2.6.24.png
> >>
> >> Gordon Malm (gengor)
> >>
> >> On Friday, January 23, 2009 10:14:11 Grant wrote:
> >>> > [snip]
> >>> >
> >>> >> menuconfig isn't letting me disable PAGEEXEC.  Maybe it's tied to
> >>> >> grsecurity "Gentoo (server)"?  I don't want to disable that.  Maybe
> >>> >> I should live with the slowdown?
> >>> >
> >>> > No you should not.
> >>> >
> >>> > After selecting server and saving it. You want to then select
> >>> > "Custom" that will leave all the options enabled from "server". You
> >>> > then scroll over to the PaX menu and de-select PAGE and select SEGM.
> >>> >
> >>> > Easy as pie. Good luck.
> >>>
> >>> Alright, thank you.  PAGEEXEC and SEGMEXEC are both selected via
> >>> Gentoo (server) so I disabled PAGEEXEC.  Should I submit a bug too?
> >>>
> >>> - Grant