[rsbac] PaX support by RSBAC

Amon Ott ao at rsbac.org
Tue Oct 7 14:16:46 MEST 2003


On Saturday 27 September 2003 21:26, Amon Ott wrote:
> Am Sonntag, 28. September 2003 18:56 schrieb Peter Busser:
> > A nice feature would be support of PaX by RSBAC. Or a kernel module that
> > can be loaded to provide that support. Using chpax sucks, it changes the
> > binary file. It would be better if the flags would be stored and managed 
by
> > RSBAC.
> 
> This would rather easy to implement with a single additional list per 
> filesystem and some management code. I will look into it.

Just had a look at the PaX patch: the flags are taken directly from the elf 
header struct, with a bunch of #ifdefs for the different PaX features.

We could copy this behaviour, but it would be quite PaX version dependent.

Amon.
-- 
http://www.rsbac.org - GnuPG: 2048g/5DEAAA30 2002-10-22


More information about the rsbac mailing list