1 |
> Is the hardened tool-chain set to use PageExec? |
2 |
|
3 |
what gets used depends on two things: your kernel .config |
4 |
and the PaX control bits (which come either from the |
5 |
executable or from an ACL system). the toolchain creates |
6 |
executables that enable (well, more like request) both |
7 |
PAGEEXEC and SEGMEXEC, and whichever you enabled in your |
8 |
kernel's .config will then be used. if you enabled both |
9 |
then SEGMEXEC will be used over PAGEEXEC (on 2.6 you can |
10 |
actually decide which one you want as default). |
11 |
|
12 |
> If so, how can I change it to use SEGMEXEC? |
13 |
|
14 |
just enable SEGMEXEC in .config and it will be used over |
15 |
PAGEEXEC. |
16 |
|
17 |
-- |
18 |
gentoo-hardened@g.o mailing list |