Gentoo Archives: gentoo-hardened

From: Alex Efros <powerman@××××××××××××××××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] PaX setup for Core 2 Duo
Date: Wed, 01 Nov 2006 13:56:37
Message-Id: 20061101135401.GA1274@home.power
In Reply to: [gentoo-hardened] PaX setup for Core 2 Duo by Alex Efros
1 Hi!
2
3 I've just tested 3 configurations (test was: `make clean; time make bzImage`).
4
5 First test:
6 > [ ] Paging based non-executable pages
7 > [*] Segmentation based non-executable pages
8 Second test:
9 > [*] Paging based non-executable pages
10 > [ ] Segmentation based non-executable pages
11 Third test:
12 > [*] Paging based non-executable pages
13 > [*] Segmentation based non-executable pages
14 > Default non-executable page method (PAGEEXEC)
15
16 First test results:
17 real 4m18.384s
18 user 4m3.780s
19 sys 0m15.674s
20 Second and third tests results (difference between these tests are few sec):
21 real 5m56.648s
22 user 4m27.240s
23 sys 1m21.575s
24
25 Looks like PAGEEXEC ~40% slower... while it should be few percents faster.
26
27 I'm using sys-kernel/hardened-sources-2.6.16-r11.
28 Kernel compiled as for Permium-M.
29 CFLAGS in /etc/make.conf set to "-march=pentium-m -msse3 -O2 -pipe".
30 In BIOS I've 'Execute Disable Bit: [Enabled]'.
31
32 --
33 WBR, Alex.
34 --
35 gentoo-hardened@g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] PaX setup for Core 2 Duo pageexec@××××××××.hu