Gentoo Archives: gentoo-hardened

From: pageexec@××××××××.hu
To: Miguel Filipe <miguel.filipe@×××××.com>
Cc: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] gentoo-dev-hardened-2.6.7-r10 doesn't boot with pax enabled.
Date: Fri, 05 Nov 2004 09:51:13
Message-Id: 418B5ADE.23997.11ACD11F@localhost
In Reply to: Re: [gentoo-hardened] gentoo-dev-hardened-2.6.7-r10 doesn't boot with pax enabled. by Miguel Filipe
1 > Will you want my .config file?
2
3 yes, please, it won't hurt (email me separately, not the list).
4
5 > btw, I also have a powerpc, how is the status of pax on ppc?
6 > - performance issues
7
8 EMUPLT takes its toll as usual, but i forget the exact numbers
9 now (was 1.5 years ago when i last touched the ppc port), could
10 very well be 50-100%. if userland is cleaned up (.plt is no longer
11 runtime generated) this should be much less.
12
13 > - should non-executable pages or segments be prefered?
14
15 there's only PAGEEXEC on ppc (and ppc64), PaX doesn't use the ppc
16 segmentation logic, it's too coarse grained.
17
18 > - aslr status..
19
20 should be ok.
21
22 > pax on ppc64, does it use non-exec pages bit? there is hw support..
23 > just like the in the amd64.
24
25 i think only 4xx has explicit hardware NX support and the mainline
26 linux kernel doesn't really use it there nor do i have access to such
27 boards, so they're not supported as of now. the other models have
28 implicit support for the per-page NX bit and PaX uses that, although
29 noone has ever reported back on ppc64 yet.
30
31
32 --
33 gentoo-hardened@g.o mailing list