Re: [gentoo-hardened] Question about ASLR

[PaX Team]

On 7 Sep 2015 at 11:06, René Rhéaume wrote:

> 2015-09-07 10:41 GMT-04:00 PaX Team <pageexec@××××××××.hu>:
> > i wouldn't call it magic but PaX used to provide RANDEXEC:
> >
> >   https://pax.grsecurity.net/docs/randexec.txt
>
> Is RANDEXEC abandoned because it could not be ported to other architectures?

no, portability isn't a concern in general (if it were, we'd have removed
half the features already ;). rather, the underlying code was too complex
to maintain after a while (IIRC, it's become much harder with the 2.6 kernel
series) and the benefits weren't enough to justify the costs (e.g., false
positives, performance impact).