Gentoo Archives: gentoo-hardened

From: Grant <emailgrant@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Grsecurity slows down a web server?
Date: Fri, 23 Jan 2009 19:05:04
Message-Id: 49bf44f10901231105n1e054c7frc5d8e39cf43a814c@mail.gmail.com
In Reply to: Re: [gentoo-hardened] Grsecurity slows down a web server? by Gordon Malm
1 > Try 'pspax'. If there is no NX bit and you enable both PAGEEXEC and SEGMEXEC
2 > it should not be using PAGEEXEC.
3
4 What should I be looking for from pspax? I have to admit it does seem
5 faster now that I've disabled PAGEEXEC.
6
7 - Grant
8
9
10 > http://www.bumpin.org/pics/PaX/pax_performance-2.6.24.png
11 >
12 > Gordon Malm (gengor)
13 >
14 > On Friday, January 23, 2009 10:14:11 Grant wrote:
15 >> > [snip]
16 >> >
17 >> >> menuconfig isn't letting me disable PAGEEXEC. Maybe it's tied to
18 >> >> grsecurity "Gentoo (server)"? I don't want to disable that. Maybe I
19 >> >> should live with the slowdown?
20 >> >
21 >> > No you should not.
22 >> >
23 >> > After selecting server and saving it. You want to then select "Custom"
24 >> > that will leave all the options enabled from "server". You then scroll
25 >> > over to the PaX menu and de-select PAGE and select SEGM.
26 >> >
27 >> > Easy as pie. Good luck.
28 >>
29 >> Alright, thank you. PAGEEXEC and SEGMEXEC are both selected via
30 >> Gentoo (server) so I disabled PAGEEXEC. Should I submit a bug too?
31 >>
32 >> - Grant

Replies

Subject Author
Re: [gentoo-hardened] Grsecurity slows down a web server? "Javier J. Martínez Cabezón" <tazok.id0@×××××.com>
Re: [gentoo-hardened] Grsecurity slows down a web server? Gordon Malm <gengor@g.o>