[rsbac] PaX support by RSBAC
Amon Ott
ao at rsbac.org
Tue Oct 7 14:16:46 MEST 2003
On Saturday 27 September 2003 21:26, Amon Ott wrote:
> Am Sonntag, 28. September 2003 18:56 schrieb Peter Busser:
> > A nice feature would be support of PaX by RSBAC. Or a kernel module that
> > can be loaded to provide that support. Using chpax sucks, it changes the
> > binary file. It would be better if the flags would be stored and managed
by
> > RSBAC.
>
> This would rather easy to implement with a single additional list per
> filesystem and some management code. I will look into it.
Just had a look at the PaX patch: the flags are taken directly from the elf
header struct, with a bunch of #ifdefs for the different PaX features.
We could copy this behaviour, but it would be quite PaX version dependent.
Amon.
--
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22
More information about the rsbac
mailing list