Re: [gentoo-hardened] gentoo hardened in VMware

On 15 Sep 2006 at 11:38, Marcel Meyer wrote:

> I think disabling SSP _or_ the "NX-bit" in the kernel (x86-32) helped to get
> a significant performance boost (but perhaps I'm just imagining sth. since
> it seems logical/possible for me ;-) ). The last post on this list I found
> was from 2004 mentioning potential problems with pageexec - is this it?
>
> My question is, can that be? Who is using hardned gentoos within some
> vmware-vms? How do I get good performance *g* (speak: which options not to
> use)? When it's only stuff in the kernel, it is easy to test out. But
> recompiling the whole system wouldn't be that funny ;)

PAGEEXEC and UDEREF on i386 don't work well in VMs, the rest should be fine.

-- 
gentoo-hardened@g.o mailing list