Re: [gentoo-hardened] hardened workstation - is that worth it?

On 5 Dec 2008 at 9:48, Ned Ludd wrote:

> On Fri, 2008-12-05 at 17:29 +0200, pageexec@××××××××.hu wrote:
> > On 25 Nov 2008 at 21:36, Javier Martínez wrote:
> >
> > > In my opinion getting X-window running is bad in security concerns, by
> > > this reasons:
> > > - First: PaX should be disable in mprotect terms since Xorg needs it
> > > (with it refuse to run) .
> >
> > - PaX flags: -------x-e-- [/usr/bin/Xorg]
> >
> > and it works for me... so why do you need to disable MPROTECT on your Xorg?
> >
>
> Could be that other ppl might start hitting that mesa bug..

if you mean the runtime generated dispatcher stubs and T&L things,
i thought they'd affect apps only, not the X server itself...