Archives
Archives
| From: | "Kevin F. Quinn" <kevquinn@g.o> | ||
|---|---|---|---|
| To: | gentoo-hardened@l.g.o | ||
| Subject: | Re: [gentoo-hardened] Setting up Hardened Gentoo | ||
| Date: | Wed, 14 Feb 2007 20:44:57 | ||
| Message-Id: | 20070214214427.1efd850c@c1358217.kevquinn.com | ||
| In Reply to: | [gentoo-hardened] Setting up Hardened Gentoo by "Tino Müller" |
||
| 1 | On Wed, 14 Feb 2007 17:09:22 +0100 |
| 2 | "Tino Müller" <gnaag@×××.de> wrote: |
| 3 | |
| 4 | > # CONFIG_PAX_NO_ACL_FLAGS is not set |
| 5 | > CONFIG_PAX_HAVE_ACL_FLAGS=y |
| 6 | > # CONFIG_PAX_HOOK_ACL_FLAGS is not set |
| 7 | |
| 8 | I think your DAC is overriding the PaX headers on the paxtest |
| 9 | binaries, and it's operating in a mode where it relaxes everything by |
| 10 | default. |
| 11 | |
| 12 | If you're not using a DAC, you probably want CONFIG_PAX_NO_ACL_FLAGS=y |
| 13 | instead. |
| 14 | |
| 15 | -- |
| 16 | Kevin F. Quinn |
| File name | MIME type |
|---|---|
| signature.asc | application/pgp-signature |
| Subject | Author |
|---|---|
| Re: [gentoo-hardened] Setting up Hardened Gentoo | "Tino Müller" <gnaag@×××.de> |