Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 29 Jun 2011 23:43:39 +0400
From: Solar Designer <>
Subject: Re: overview of PaX features


On Wed, Jun 29, 2011 at 10:37:28PM +0400, Vasiliy Kulikov wrote:
> That's not only about old apps, but also a default relaxed policy for
> the toolchain:

Of course.  In my experience, most programs that currently get
executable stack actually don't need it.

And for gcc trampolines we can include the emulation code in the kernel.

> For upstream linux the default policy is if no GNU_STACK present, the
> stack flags is defined by a constant.  I think it makes sense for
> the upsteam to change it to per pid namespace, with the same default.

Sounds good.  Then we'll have less code to maintain in our patch.



Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.