[gentoo-hardened] Question WRT Grsecurity/PAx and AV Scanner

[Martin Bene]

Hi,

I'm trying to get kaspersky AV (4.0.3.1) to run on a gentoo box with active
gr security Segmentation based exec protection.

Problem:
	* The kaspersky scanner / scanner daemon processess triggers the pax
protection
	* The executables are statically linked
	* The executables check for modification, i.e. after modifying with
chpax they no longer run.

I expect that the triggering code would be a gcc trampoline, so compiling
with trampoline + automatic detection turned on might work - but it's not a
very good solution since it affects all executables on the system.

Is there any way of running an executable with modified grsecurity options
without changing the on-disk file with chpax?

Thanks, Martin

--
gentoo-hardened@g.o mailing list