Re: [gentoo-hardened] hardened workstation - is that worth it?

[Javier Martínez]

Have you said me that I'm obsoleted?, ok, I agreed with you... o:),
but since I don't use xorg in servers... no problem. You still having
the other problems I commented. One question, somebody knows what made
xorg incompatible with pax mprotect restrictions in earlier versions?.

I put you a link that is newer than the link that Brian Kroth posted
and still having the incompatibilities on:
http://www.gentoo.org/proj/en/hardened/pax-quickstart.xml, maybe a
mistake?
2008/12/5  <pageexec@××××××××.hu>:
> On 25 Nov 2008 at 21:36, Javier Martínez wrote:
>
>> In my opinion getting X-window running is bad in security concerns, by
>> this reasons:
>> - First: PaX should be disable in mprotect terms since Xorg needs it
>> (with it refuse to run) .
>
> - PaX flags: -------x-e-- [/usr/bin/Xorg]
>
> and it works for me... so why do you need to disable MPROTECT on your Xorg?
>
>
>