Re: [gentoo-hardened] teamspeak2-server-bin segfaulting

On 9 Jan 2007 at 9:43, Adam James wrote:

> On my hardened amd64 system, ts will not run at all, even with all
> protections disabled via chpax. However, when using chpax to disable
> PAGE_EXEC on an i386 system, ts will start. This led me to believe that
> on architectures where the NX bit is supported natively by the
> kernel/Pax [1], the protection cannot be disabled on a per-binary
> basis. Perhaps someone more knowledgeable can clarify this?

i just posted an explanation for this behaviour and would also
add here that in the vanilla kernel there's a way to control
(simulate) the older 'read implies exec' behaviour (which would
be an alternative to hexediting the program header): it's
determined by the PT_GNU_STACK program header. if it's not
present or specifies RWE rights then the 'read implies exec'
personality will be automatically turned on (that is, when
PaX/MPROTECT is already disabled on the binary). so execstack -s
may also get such apps to work.


-- 
gentoo-hardened@g.o mailing list